Firewall培训讲义.ppt

Computer Center, Dept. CIS, NCTU Intro. to Personal Firewalls Chen-Kuei Lee Computer Center Dept. of Computer Information Science National Chiao Tung University cklee@.tw Outline What is a firewall Types of firewalls Why need personal firewall What personal firewall can do What personal firewall can’t do Personal firewall software introduction Reference What is a firewall What is a firewall Software or hardware between your LAN and the Internet, inspecting both inbound and outbound traffic by rules that you set, which define the sort of security you want. Access Control Policy Service Control Direction Control ( Source 、 Destination ……) User Control 、 Time Control Behavior Control (eg. Filter e-mail) Types of firewalls Packet Filter source address destination address source ports destination ports packet type flags Types of firewalls (cont.) Stateful Inspection source address destination address source ports destination ports packet type flags state table Types of firewalls (cont.) App-Proxy Gateway source address destination address source ports destination ports portocols application rules What’s a personal firewall Personal firewalls are software-only firewalls that run on the computer they protect. Designed for individual users or small networks. (eg.Windows XP comes with a personal firewall) Inexpensive and easy to install and use, would offer clearly explained configuration options. Allow the user to access all necessary network and web resources, protect from external hacking and alert the user to malicious activity. Why need personal firewall Now that always-on broadband connections such as cable modems and xDSL are becoming more popular, home users are at risk. Protecting your computer from network attacks when connected to the Internet. Stoping malicious back door programs like BackOrifaceor Trojan Horse from connecting to remote systems. To ensure that your computer is not participate in the denial-of-service attack on the Internet. Stoping