Linux内核防火墙实现与应用研究

随着Internet的迅速发展和普及，网络在给用户提供方便的同时，也给了恶意攻击者提供机套。Linux内核防火墙实现了一种性价比较高的安全方案。有效地阻止恶意攻击，成了很多网络安全管理员的选择。本文首先介绍Linx内核防火墙nerfilter的框架原理．然后讲述iptables。最后结合实例详细说明如何利用netfilter／iptables构建防火墙，保护服务器的安全。

The Research of Implement and Application of Linux Kernel Firewall

Along with the Internet rapid development and the popularization, while the network provides the convenience to the user, it also gives the malicious aggressor the opportunity. The Linux kernel firewall realized one kind of high costly with price lower security plan, effectively prevents hacker to slander and has become very good choice for many network security manager. This article first introduces the principle of Linux kernel firewall netfilter, then explain iptables, finally unifies the example and detailedly explains how constructs the firewall using netfilter/iptables to protects the server.