NAT技術是為了解決IPv4網絡地址空間的不夠而提出的一種過渡技術，并由于其簡單、高效的特性而得到了廣泛的應用。該文介紹了NAT技術及在Linux 2.4內核中基于Netfilter框架的NAT實現原理，并結合實驗室的網絡建設，給出其在實驗室網絡建設中應用實例。
關鍵詞：網絡地址譯碼器；Netfilter；Iptables
NAT Technology and Its Application Based on Netfilter
LE Deguang , GUO Donghui, WU Boxi
(Institute of Technical Physics, Xiamen University, Xiamen 361005)
【Abstract】NAT is one of the most important technologies to resolve the lack of IPv4 addresses, and has been widely applied in the
extension of LAN for Internet. This paper details on the NAT technology and its implementation principle based on Netfilter in Linux 2.4
kernel. With the Netfilter technology, it builds up a LAN in the laboratory accessed to Internet, and the outline of the LAN is also
presented.
【Key words】Network address translator(NAT); Netfilter; Iptables