iptables netfilter培训资料.ppt

iptables/netfilter;ip_forward;;;;;;;ip_forward;;;;http;;;;The TCP Finite State Machine (FSM);TCP State;;;;;;;The TCP Finite State Machine (FSM) ;规则：标准;;/proc/sys/net/ipv4/ip_forward;;;80;;;;;;: IP;ASCII;MAC: Media Access Control;广播风暴;1:a ? 2：b;;;/proc/sys/net/ipv4/ip_forward;;;;数据包过滤匹配流程;;drop;;;;;netfiter的规则表、链结构;Date;IP首部;Tcp首部;;;;;;;;;SNAT;;SNAT策略的应用环境;SNAT策略的原理;SNAT策略的原理;DNAT策略的应用环境;DNAT策略的原理;;源地址转换;;;;;Objectives;What is IPTables?;Contd.;Salient Features;What can be done with IPTables?;;;;;;;;;;;;;;;SNAT策略概述;SNAT策略的应用环境;SNAT策略的原理;SNAT策略的原理;SNAT策略的应用;SNAT策略的应用;SNAT策略的应用;网关使用动态公网IP地址的情况;DNAT策略概述;DNAT策略的应用环境;DNAT策略的原理;DNAT策略的应用;DNAT策略的应用;DNAT策略的应用;通过DNAT策略同时修改目标端口号;SNAT;;DNAT, PNAT;SNAT;DNAT;;10.0.x.1;;l7-filter;;Application Layer Packet Classifier ;;;What Need To Get;Kernel Patch; Configuring and Compiling the kernel;Configuring and Compiling the kernel;Networking support → Networking Options →Network packet filtering framework → IP: Netfilter Configuration M IPv4 connection tracking support (required for NAT) M Full NAT M MASQUERADE target support M NETMAP target support M REDIRECT target support ;Compiling and installing the kernel;iptables;iptables;;L7-filter Supported Protocols;;;;;;项目;