| RedHat As 5下L7-filter封包过滤的搭建应用 |
| |
| 引用本文： | 李剑,罗洪梅.RedHat As 5下L7-filter封包过滤的搭建应用[J].计算机应用,2009,29(Z1). |
| |
| 作者姓名： | 李剑 罗洪梅 |
| |
| 作者单位： | 1. 重庆工程职业技术学院,计算机系,重庆,400037
2. 重庆渝北区龙山中学,重庆,401147 |
| |
| 摘 要： | 分析了Linux netfilter/iptables架构下L7-filter的功能、工作原理和实现机制,利用iptables的独立模块L7-fiter实现了具有封锁MSN、QQ等P2P封包过滤功能,并进行相关测试.测试结果表明,该layer7的封包过滤可以在具有网络地址转换(NAT)功能的防火墙体系上实现,限制对P2P等大流量数据对网络带宽的占用,使得网络运行更加高效稳定.
|
| 关 键 词： | 内核 七层过滤 网络地址转换 |
Implementation and application of L7-filter based on RedHat As 5 |
| |
| LI Jian,LUO Hong-mei.Implementation and application of L7-filter based on RedHat As 5[J].journal of Computer Applications,2009,29(Z1). |
| |
| Authors: | LI Jian LUO Hong-mei |
| |
| Affiliation: | 1.Department of Computer;Chongqing Vocational Institute of Engineering;Chongqing 400037;China;2.Chongqing Longshan Middle School;Chongqing 401147;China |
| |
| Abstract: | This paper analyzed the function,working principles and mechanism of L7-filter under the framework of Linux netfilter/iptables,realized filtering of the P2P packets which could blockade MSN and QQ by use of independent modules L7-fiter of iptables,and did related tests.The results of tests show that this packet filter could be realized in the firework systems which could translate network address,and restrict the occupation of network bandwidth from large flow of data such as P2P in order to make the networ... |
| |
| Keywords: | iptables P2P |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
|
