基于Netfilter/iptables的IP地址隐藏技术研究

Research on IP Address Hidden Technology Based on Netfilter/iptables Module

随着Internet的迅速发展,网络中因为IP地址信息泄漏而遭受的攻击日益严重。通过代理服务器来隐藏内部网络设备IP地址的传统方式,不仅影响数据传输速率,而且其本身也易成为攻击的目标。针对这一亟待解决的问题,基于Netfilter/iptables模块和IP地址替换技术,在Linux环境下通过DNAT和SNAT,以及多线程系统调用的方式实现了静态IP和DHCP动态分配IP的地址信息隐藏。通过网络实验证明,达到了预期的目的。

With the rapid development of Internet, the attacks caused by the IP address leakage become more and more serious. The traditional way to hide the IP address through a proxy server affects the data transmission rate and the proxy server could become the easily-attacked target. In response to this problem, the hiding of the static IP and DHCP dynamic IP address information is implemented with Netfiher/iptables modules and IP address substitution technique, through DNAT, SNAT and multiple threads in Linux OS. The experiment shows that it achieves the desired results.