CAJ | 학술논문

Netfilter/iptables是Linux 2．6内核中的通用性功能框架，能够对数据包进行处理。分析了基于Linux内核的Netfilter/iptables框架以及iptables表、链的关系与作用；应用Netfilter/iptables中的包过滤特性建立了内外网间的防火墙，通过手动配置iptables规则的方式对数据包进行有目标性的过滤，防止非法数据攻击，实现了阻隔Ping洪水攻击、拦截特定网段数据包、数据包入队等待后续处理等功能，达到了保证内网安全的效果。
Netfilter/iptables시Linux 2．6내핵중적통용성공능광가，능구대수거포진행처리。분석료기우Linux내핵적Netfilter/iptables광가이급iptables표、련적관계여작용；응용Netfilter/iptables중적포과려특성건립료내외망간적방화장，통과수동배치iptables규칙적방식대수거포진행유목표성적과려，방지비법수거공격，실현료조격Ping홍수공격、란절특정망단수거포、수거포입대등대후속처리등공능，체도료보증내망안전적효과。
Netfilter/iptables is a general function frame for data packet process in Linux 2 .6 kernel.The functions of Netfilter/iptables frame,iptables chart and chain,and the relationship between them are analyzed.A firewall between internal and external networks is set up.The rules are configured manually to filer targeted packets.It is applied to prevent illegal data attack and ob-structing Ping flooding attack,intercept the packets of specific network segment and enqueueing the data packets for subsequent processing,and guarantee the security of internal network.