【摘要】 Netfilter是Linux最新版本中的网络防火墙实现,是对以前Linux防火墙版本的完全替换。Netfilter完成了包括包过滤、地址翻译、状态检测、数据包操作等重要功能,是一个结构合理、功能强大、扩展性强的网络安全框架,在研究防火墙的原理、实现上具有重要的借鉴意义。分析和讨论了Linux操作系统的网络安全框架Netfilter的原理和实现。更多还原

【Abstract】 Netfiletr is building block of a framework inside the newest linux kernel.It is the re-designed and heavily improved successor ofthe previous linux firewall systems.This framework enables packet filtering,network addresss,state detection and other packetman-gling.Netfilter has reasonable infrastructer and excellent expansibility.Analysis of netfilter will help to understand the principle and im-plement of firewall.The principle and system framework of netfilter in linux were introduced.更多还原