【毕业论文】基于 linux 的网络防火墙.docVIP

毕业设计（论文） 设计（论文）题目： 基于 linux 的网络防火墙 　系统的设计与实现 　 基于 Linux 的网络防火墙系统的设计与实现 摘 要 防火墙技术作为一种建立在现代通信网络技术和信息安全技术基础上的应用性安全技术，近年来也成为了安全技术中的一个热门，它可以在一定程度上保护计算机和网络的安全，避免可能的损失。 Netfilter 是 Linux 2.4 和 2.6 版本内核中实现的包过滤框架。它工作在内核空间中，大量地避免了在内核空间和用户空间之间数据交换，速度快，高效，而功能强大。在本课题中基于 Linux 平台实现了一个简单的防火墙系统。它主要分为两个部分：用户界面和防火墙后台。用户界面是与用户交流的接口，它主要由 GTK+ 编写而成，另外为了对用户更加友好也使用了一些 GNOME 库。它主要的功能是：用户可以方便的查看和控制防火墙的状态;查看和转存防火墙的事件日志;设置防火墙的策略，定制防火墙规则。而防火墙后台则是防火墙功能的真正实现部分，它不信赖于用户界面而运行，运行于后台，对用户来说不可见。它基于 Linux 系统的 netfilter/iptables 实现的。 测试结果表明，本防火墙的能根据设置的安全策略能通过防火墙的数据包进行访问控制，阻止不符合规则的包进出本防火墙。 关键词：防火墙；包过滤；Linux；netfilter；iptables  Designation and Realization of Firewall under Linux ABSTRACT Firewall Technology, as a applicating security technology based on communicating network technology and information security technology, is a hot topic in the field of security technology in recent years. It is able to protect computer and network in general level to prevent computer and netword from attacking via network. Netfilter is a framework in Linux 2.4 version and 2.6 kernel. It runs in the kernel space to get rid of data transfer between kenerl space and user space. Fast, efficient and powerful. In this issue, it is a simple firewall system based on Linux platform. There are two parts: user interface and firewall backend. User interface, communicate with user, is developed by GTK+. What is more, it depends on some GNOME library for friend user experience. The main functions: check and control the firewall status easily, check and save the firewalls event log, config the firewalls policy, speicalize the firewalls rule. And firewall backend is the real part in the main functions. It runs without depending user interface, work in the backend, invisuable to user. It is based on netfilter/iptables in Linux system. Test report means that the firewall can act access control (forbid the packet do not follow the rule in the firewall) via firewalls packet filter depending on the configuration of security