基于Netfilter的包過濾防火墻設(shè)計(jì)
畢業(yè)
基于Netfilter的包過濾防火墻設(shè)計(jì)
摘 要 本文介紹了運(yùn)用Netfilter防火墻技術(shù)，在LINUX環(huán)境上實(shí)現(xiàn)包過濾防火墻的方法和過程，在內(nèi)容上主要包括了7個(gè)部分：第1部分對(duì)防火墻的概述；第2部分則介紹此次開發(fā)的平臺(tái)LINUX和軟調(diào)環(huán)境；第3部分對(duì)幾種網(wǎng)絡(luò)協(xié)議做了簡(jiǎn)單的分析；第4部分分析了網(wǎng)絡(luò)攻擊及其防御措施；第5部分則是本次設(shè)計(jì)的核心部分Netfilter框架分析以及防火墻的開發(fā)設(shè)計(jì)思路；第6部分則介紹LINUX設(shè)備驅(qū)動(dòng)程序的設(shè)計(jì)，它是開發(fā)用戶接口部分的理論基礎(chǔ)；最后則是所開發(fā)程序的使用說明部分。
本防火墻程序具有可控制性強(qiáng)，能對(duì)外界訪問采取有針對(duì)性的防御，并且加載快捷，可移植性強(qiáng)等優(yōu)點(diǎn)。
關(guān)鍵字 防火墻；包過濾；設(shè)備驅(qū)動(dòng)；協(xié)議
Packet Filter Firewall Designing Based On Netfilter
Abstract This thesis mainly deals with the packet filter firewall by applicating Netfilter on the basis of Linux, consisting of seven parts: first, it generally describes the firewall; second, it introduces the exploiting platform Linux and the software debug environment; third, it simply analyzes some networking protocols; fourth, it analyzes the network attacks and their defensing measures; fifth, it describes the most important part of the thesis--the analysis of netfilters frame and the exploiting and designing process of the firewall; sixth, it introduces the design of the device drivers of the Linux which is the theory base of exploting the users interface ; the last part is the applicating guide of its exploiting process.
This firewall owns merits of strong controllability, pertinent defence against outside visiting, load shortcutting and portability.
Keywords firewall; packet filter; device drivers; protocol
注釋：不含源代碼
【基于Netfilter的包過濾防火墻設(shè)計(jì)】相關(guān)文章：
基于LINUX操作系統(tǒng) 的防火墻技巧及其具體實(shí)現(xiàn)03-23
基于VHDL的DDS的設(shè)計(jì)與分析03-07
基于Ajax技術(shù)的網(wǎng)站設(shè)計(jì)03-08
基于EDA技術(shù)的FPGA設(shè)計(jì)03-18
淺談防火墻審計(jì)12-10
基于維度的圖形設(shè)計(jì)教學(xué)與運(yùn)用03-21