Linux内核防火墙Netfilter架构实现与应用研究

The Implementation And Application Reseach of Linux Kernel Firewall Netfilter Architecture

对Linux内核防火墙进行了分析,并通过内核防火墙模块对以Netfilter框架为基础的设计内核防火墙方法进行介绍。对Netfilter架构进行剖析,如利用钩子来实现对IP包的检测,管理注销、注册下挂函数的方法等。

the Linux kernel firewall are analyzed, and the kernel firewall module, the design method of Firewall Based on Netfdter are introduced. This paper analyses the architecture of the Netfilter, such as how to use the hook to achieve detec- tion of IP packet; management cancellation; under registration function method.