在眾多網(wǎng)絡(luò)安全技術(shù)中，防火墻技術(shù)是常用的一種。本文首先分析了網(wǎng)絡(luò)安全和防火
墻的基本概念，然后設(shè)計了一種以太網(wǎng)綜合型主機(jī)防火墻。該防火墻使用了包過濾技術(shù)，但是在傳統(tǒng)的包過濾技術(shù)上作了較大的改進(jìn)，在包過濾的規(guī)則中加入了關(guān)鍵字過濾規(guī)則以及基于對TCP 連接狀態(tài)進(jìn)行監(jiān)測的動態(tài)過濾規(guī)則。在該防火墻中還集成了入侵檢測模塊，使得防火墻能夠?qū)W(wǎng)絡(luò)中的異常情況作出響應(yīng)，提高了系統(tǒng)的安全性。本文中還在Linux 操作系統(tǒng)下將該防火墻進(jìn)行了實(shí)現(xiàn)，并對其性能進(jìn)行了測試。
關(guān)鍵字：防火墻，Linux, 入侵檢測，包過濾技術(shù)
The Desgin of Campus Network Firewall Based on Linux Zhang haichun 1 Qu shuang 2
(computer department of Shijiazhuang university Hebei shijiazhuang 050035) (Shijiazhuang Information Engineering vocational college Heibei shijiazhuang 050035) 2 Abstract: Firewall is a kind of network security technology in corrunon use. In this paper, at first， the .basis conception of network security and firewall is analyzed. And then,a compositive firewall
used in host under Ethernet environment is technology, but designed. This firewall uses the PacketFilter it make some improvement over the coventional Packet Filtert ethnology. In the Filter rules, the rule basedKeyword in the Packets and the rule base TCP connection Stateful Inspect is added.-$esides these rule s, an IDS (Intrusion Detection System)module is integrated in.the firewall,which makes firewall can response the abnormal state in the network. The IDS module improve the security of host system. At the end of this paper, the realization of this firewall under Linux operation system and 'the test of this firewall is described.
Key word: Firewall, Linux, Intrusion Detection, Packet Filtert ethnology