基于Linux的防火墙系统的设计与实现

Linux-based Firewall Systems Design and Implementation

在当前防火墙相关技术中,Linux防火墙已经成为不可忽视的重要力量.本文首先对Netfilter的内核架构进行了分析,并在此基础之上,采用模块编程方式开发了一个高效的、稳定的、实用的基于包过滤的防火墙系统.实践证明由于Linux防火墙的开源性,Linux下的防火墙实现机制是一个值的探讨的领域.

In the current firewall-related technologies,Linux firewall has become a major force can not be ignored.In this paper,first Netfilter core structure of the analysis,and on this basis,a modular programming approach developed an efficient,stable and practical based on packet filtering firewall system.Practice has proved that open-source nature of the firewall as Linux,Linux firewall implementation mechanism under the value of a field.