网络安全与防护技术探索

An Exploration for Network Safety and Protective Technique

介绍了防火墙技术的基本概念和系统结构,讨论了实现防火墙的两种技术手段:一种是基于分组过滤技术(Packet filtering),它的代表是在筛选路由器上实现的防火墙功能;一种是基于代理技术(Proxy),它的代表是在应用层网关上实现的防火墙功能。

This paper introduces the basic concept and sysytem structure of fire-wall technology,and discusses two main thecnological means to realize fire-wall.One is based on packet filtering,whose function of fire-wall is realized through the screening router;while the other is based on proxy and its typical representation realizes that function on the gateway of application level.