Linux下基于Netfilter的动态包过滤防火墙的设计与实现

网络安全在现代社会中的地位越来越重要,动态包过滤技术作为一种更有效的防火墙技术在网络安全领域起着关键性的作用。本文在分析了动态包过滤技术的工作原理、Linux系统下Netfilter框架结构的基础上,详细讨论了动态包过滤技术基于Netfilter结构的实现方法和实现细节,并最终完成了动态包过滤防火墙的设计和实现。

Design and implementation of dynamic packet filtering firewall based on Netfilter under Linux

Today,the security of network is becoming more and more important.Dynamic packet filtering technique which acts as a more useful firewall technique plays a key role in the security of network.The article analyzes the work theory of dynamic packet filtering technique and framework of Netfilter in Linux,discusses in detail the method of implementing dynamic packet filtering technique on the basis of Netfilter.At last,the design and implementation of it is finished.