基于Netfilter的包過濾防火墻設(shè)計

畢業(yè)論文

基于Netfilter的包過濾防火墻設(shè)計
 
摘 要 本文介紹了運用Netfilter防火墻技術(shù)，在LINUX環(huán)境上實現(xiàn)包過濾防火墻的方法和過程，在內(nèi)容上主要包括了7個部分：第1部分對防火墻的概述；第2部分則介紹此次開發(fā)的平臺LINUX和軟調(diào)環(huán)境；第3部分對幾種網(wǎng)絡(luò)協(xié)議做了簡單的分析；第4部分分析了網(wǎng)絡(luò)攻擊及其防御措施；第5部分則是本次設(shè)計的核心部分Netfilter框架分析以及防火墻的開發(fā)設(shè)計思路；第6部分則介紹LINUX設(shè)備驅(qū)動程序的設(shè)計，它是開發(fā)用戶接口部分的理論基礎(chǔ)；最后則是所開發(fā)程序的使用說明部分。
本防火墻程序具有可控制性強，能對外界訪問采取有針對性的防御，并且加載快捷，可移植性強等優(yōu)點。
關(guān)鍵字 防火墻；包過濾；設(shè)備驅(qū)動；協(xié)議

Packet Filter Firewall Designing Based On Netfilter
 
Abstract This thesis mainly deals with the packet filter firewall by applicating Netfilter on the basis of Linux, consisting of seven parts: first, it generally describes the firewall; second, it introduces the exploiting platform Linux and the software debug environment; third, it simply analyzes some networking protocols; fourth, it analyzes the network attacks and their defensing measures; fifth, it describes the most important part of the thesis--the analysis of netfilters frame and the exploiting and designing process of the firewall; sixth, it introduces the design of the device drivers of the Linux which is the theory base of exploting the users interface ; the last part is the applicating guide of its exploiting process.
This firewall owns merits of strong controllability, pertinent defence against outside visiting, load shortcutting and portability.
Keywords firewall; packet filter; device drivers; protocol

注釋：不含源代碼

【基于Netfilter的包過濾防火墻設(shè)計】相關(guān)文章：

基于Linux系統(tǒng)的包過濾防火墻03-08

基于LINUX操作系統(tǒng) 的防火墻技巧及其具體實現(xiàn)03-23

基于VHDL的DDS的設(shè)計與分析03-07

基于Ajax技術(shù)的網(wǎng)站設(shè)計03-08

基于EDA技術(shù)的FPGA設(shè)計03-18

淺談防火墻審計12-10

基于維度的圖形設(shè)計教學(xué)與運用03-21

基于PLC的閘門監(jiān)控系統(tǒng)設(shè)計03-07

基于PQRM的PACS系統(tǒng)設(shè)計與實現(xiàn)03-07