looknstop防火墙（Looknstop firewall）.doc

looknstop防火墙（Looknstop firewall） Two. Principle chapter: rules and communications Before we introduced the principle of firewall, inside, I mentioned the firewall rules (Firewall Rules), the firewall rules are thinking, they are actually a statement, for setting up a firewall behavior, each rule corresponds to the judgment of a specific behavior, according to the rules of the content to meet the firewall condition (port, protocol type, and packet data packets to intercept) or pass, of course you can also record data. With the combination of many rules, firewall tools have brought us a strong and flexible security protection system. The network administrator configure firewall rules are often the most headache thing, a firewall work efficiency, intercept overall safety coefficient of release, in addition to the requirements of the firewall engine is powerful, it all depends on the rules set, if the firewall engine cannot identify complex data packet structure, then describe some complex rules will not operate normally. But a more powerful firewall, the corresponding set of rules is more complex, the firewall, a good rule is what matters. The rules are not just set, it revolves around a security policy implementation, many firewall products sold on the market, has been the default rules, and these rules is the firms security policy entity objects, many users to install or purchase a firewall products, has not done changes to these rules, or do not know the firewall rules, but they can still get the firewall protection, because manufacturers have for our group applied to the compatible set of rules, in other words, the user is in accepting a firewall products, has been the security strategy of manufacturer for everyone customized. But the public face of the strategy is not necessarily suitable for everyone, sometimes, some users feel that the default rule is not suitable for their actual environment, they can according to their own requirements, modify the increase of