基于NDIS过滤驱动防火墙的设计和实现

Design and Implementation of the Firewall Based on the NDIS Filter Driver

Windows作为时下最流行的个人操作系统,研究Windows环境下的防火墙有一定的现实意义。主机防火墙的数据包过滤算法是线性查找,其性能会随着过滤规则的增加而变得越来越差,为了提高防火墙的运行速度,对非法数据包的拦截能力,提出一种基于HASH双链表的过滤算法,并且通过分析、比较Windows环境下网络数据包的拦截技术,开发了一款基于NDIS6.0过滤驱防火墙软件,经过测试,它对非法数据包具有强大的拦截能力。

Windows as the most popular individual operating system.The research of firewall in the windows environment has certain practical significance.Host firewall packet filtering algorithm is linear search,its performance will only get worse and worse with the increase of filtering rules,in order to improve the running speed of the firewall,the illegal packet interception ability,in this paper,a filtering algorithm based on HASH double linked list,and by analyzing and comparing Windows environment network packet interception technology,developed a firewall software,based on NDIS6.0 filtering flooding,after test,it has strong ability to intercept illegal packet.