Netfilter防火墙应用功能扩展的研究与实现

Research and Implementation of Application Function Extension Based on Netfilter

本文主要介绍如何在Netfilter的基础上实现功能的扩展,使其既具有包过滤防火墙性能的高效率,又具有应用代理防火墙的多样性。

The paper elaborates how to implement the extend function of netfilter , so that it could work more efficiently similar to packet faltering and have more functions resembling application proxy firewall.