Iptables包过滤技术及其在机载网络上的实现

Iptables packet filtering technology and its implementation on airborne network

针对机载无线信息系统可能由地面网络技术引入网络安全威胁,因此机载网络需要对数据包进行过滤,根据规则限制数据传输。阐述了Iptables的工作原理,分析数据包过滤的规则操作及数据包的传输过程,及其在机载网络上的应用环境。对用Iptables在Linux上实现丢弃某IP数据包和阻止相关网页访问请求进行实验,在此基础上对基于Iptables的包过滤技术进行研究。

Since the potential network security threats may be introduced in airborne wireless information system due to the ground network technology,it is necessary for the airborne network to filter the data packet and limit the data transmission ac-cording to the rules.The working principle of Iptables is expounded.The filtering rules operation,transmission process and ap-plication environment of data packet on airborne network are analyzed.The experiment of how to use the Iptables to realize the discarding of some IP data packets and prevention of related webpage access request on Linux was performed.On this basis,the data packet filtering technology based on Iptables is researched.