The Optimization and Implementation of Iptables Rules Set on linux

被引：6

作者：

Xuan, Lei-fei ^{[1
]}

Wu, Pei-fei ^{[1
]}

机构：

[1] Hangzhou Vocat & Tech Coll, Informat Engn Inst, Hangzhou, Zhejiang, Peoples R China

来源：

2015 2ND INTERNATIONAL CONFERENCE ON INFORMATION SCIENCE AND CONTROL ENGINEERING ICISCE 2015 | 2015年

关键词：

linux; firewall; iptables; rules set; optimization;

D O I：

10.1109/ICISCE.2015.223

中图分类号：

TM [电工技术]; TN [电子技术、通信技术];

学科分类号：

0808 ; 0809 ;

摘要：

Firewall,as a mechanism of compulsory access control between the network or system,is an important means to ensure the network security.Firewall can be a very simple filter,but also it can be a carefully targeted gateway.But the principle is the same,which is monitoring and filtering all the information exchanged in internal and external networks.Linux as an open source operating system,is famous for it's stability and security.netfilter/iptables is a firewall system based on linux which has a great function.This thesis first analysed the working principle of iptables,then introduced iptables rule set,and last proposed an effective algorithm to optimize the rules set which is implemented based on linux system.In the part of implementation,some key code of the algorithm are given.

引用

页码：990 / 993

页数：4