【摘要】 netfilter/iptables是Linux实现包过滤、数据包处理、NAT等的功能框架,利用netfilter框架可以实现很好的数据包过滤的功能。本文主要研究使用netfilter/iptables设置和应用基于地址(源和目标)、用户和时间的访问控制策略,以阻止外部非法、不可靠的数据连接,同时保护内部用户的合法访问不受影响。更多还原

【Abstract】 Netfilter/iptables is a function framework of IP packet filtering,packet mangling and NAT which is integrated with the latest 2.4.x versions of the Linux kernel.It is ideal for us to use it configure firewalls according to our specific needs on Linux systems.This paper main discussed how to setting and applying an access control strategy which based on IP address and user and time,to stop unauthorized and unreliably sources from accessing our Linux systems,and also restrict authorized network traffic can go out.更多还原