【摘要】 包过滤防火墙无法检测出网络病毒,因此对其研究很有必要。设计的防火墙屏蔽了Linux自身的TCP/IP协议栈,重新构建了适合防火墙专用的TCP/IP协议栈,完成了防火墙上TCP协议的连接保持、数据包确认、文件传输等功能。防火墙主要考虑了HTTP协议下的文件过滤,使得内网主机在通过HTTP协议下载文件时自动过滤病毒文件,保证内网主机的安全;防火墙以Linux可加载内核模块形式实现,可以过滤链路层以上的各层;为提高病毒检测速度,提出了将病毒检测软件运行在核心态的方法。实验结果表明:设计的防火墙在性能和功能上都达到了预期目的。更多还原

【Abstract】 The existing packet filtering firewall is helpless for the spread of network virus,making a study on the designed of anti-virus firewall is very necessary.This paper designed and realized an experimental anti-virus firewall in IPv6.The firewall was realized in the form of kernel loadable module,and can be used to filter virus above link layer.The special TCP/IP used for firewall is rebuilt because transparent mode firewall cannot be run in the original TCP/IP of Linux.The firewall can get and resolve IPv6 packets and the IPv6 in IPv4 tunnel packet.It can also traverse every extension header until higher protocol layers.The firewall uses open source software to filter the virus in the network and ensures network security.For working in the kernel mode,the detecting speed was improved.The experimental results show that the performance and function of the firewall achieve the desired objectives.更多还原