Linux下DOS攻击防御防火墙的设计与实现

Design and Implement of DOS attacks Defense Firewall on Linux

网络安全是网络发展中不可忽视的重大问题,防火墙技术[1]在此基础上不断完善。提出在linux平台下防火墙的设计,目的在于防止常见的DOS攻击。在linux内核中提供了netfilter框架,这为防火墙的设计提供了方便,在netfilter基础上设计的防止各种攻击模块动态加载到内核,由此构建一个包过滤防火墙。

Network security is the network development and the major problem that cannot ignore in, firewall technology based on continuous improvement. Put on the platform of Linux firewall design, designed to prevent the common DOS attack. In the Linux kernel provides a Netfilter framework, which provides convenience for the design of firewall, based on the Netfilter design for preventing various attack module dynamically loaded into the kernel, which creates a packet filter firewall.