基于Linux的Netfilter/Iptables技术及其应用

Technology and application of Netfilter/Iptables based on Linux

Netfilter/Iptables是一个集成在Linux内核中的IP数据包过滤系统.文章主要介绍了该 系统的两个基本组件及其基本工作原理,最后应用iptables工具建立一个简单的包过滤防火墙.

Netfilter/Iptables is the IP packet filtering system integrated with the Linux kernel. This paper mainly introduces the two basic components of Netfilter/Iptables system and its working principles. Finally, a sample of Iptables on implementing a simple firewall is also provided.