摘要
为了构建安全可靠的网络,同时降低使用防火墙的成本,文章对Linux2.4内核防火墙结构Netfilter的实现机制进行了深入的研究和分析,并利用该机制设计实现了一个嵌入式Linux防火墙系统,该防火墙实现完善了包过滤、URL过滤、NAT和日志等防火墙的基本功能,同时集成了非军事区(DMZ),为Internet和Intranet之间建立了缓冲地带,从而保证Intranet的发全。此外该防火墙系统还集成了状态检测技术,在内存中维护一个跟踪连接状态的表,比简单包过滤防火墙具有更大的安全性,提供友好的管理配置界面。
Abstract： For the safety of LAN and low cost using firewall, the authors analyze the architectureof Netfilter in Linux2,4 kernel. Then the authors implement the Firewall System Based On Embedded Linux OS, which has basic functions as Package Filtration. URL filtration. NAT and log. And, it integrates with DMZ which establishes a buffer zone between Internet and Intrant to make the Intranet safer and Connection Tracking which maintains a table for connection track in order to get the more safer than Package Filtration. What＇s more, this system provides friendly GUI for configuring system.
