netfilter

Building Security Firewall System of Gansu Seismic Information Network Relies on Netfilter / iptables Technology

应用Netfilter/iptables构建甘肃地震信息网络安全防火墙系统

The Performance Optimization Scheme and Implementation of Netfilter / iptables Firewall

Netfilter/iptables防火墙性能优化方案与实现

This is where the netfilter / iptables system can help .

这就是netfilter/iptables系统的用武之处。

These are the requirements for installing the netfilter / iptables system

下面是安装netfilter/iptables系统的需求

How does the netfilter / iptables system work ?

netfilter/iptables系统是如何工作的？

A Serial Traffic Control Algorithm Based on the TCP Sliding Window in the Netfilter / Iptables Framework

Netfilter/Iptables框架下基于TCP滑动窗口的串行流量控制算法

The netfilter / iptables system gives its users total control over firewall configuration and packet filtering .

netfilter/iptables系统使其用户可以完全控制防火墙配置和信息包过滤。

Control and use of the Netfilter / iptables Firewall

Netfilter/iptables防火墙的控制与使用

I will further discuss this aspect in the section Advantages of the netfilter / iptables system .

我将在netfilter/iptables系统的优点一节中进一步讨论这方面的问题。

Netfilter / Iptables is the packet filtering system that is integrated with the Linux kernel .

Netfilter/Iptables是一个集成在Linux内核中的数据包过滤系统。

Building traversing NAT IPv6 tunnel gateway system relies on Netfilter / iptable framework

应用Netfilter/iptable框架构建穿越NAT的IPv6隧道网关系统

The implementation of HAS model is based on the Netfilter / Iptables firewall framework of Linux 2.6 kernel .

其中模块的实现是基于Linux2.6内核自带的Netfilter/Iptables防火墙构架。

This thesis introduce the research instance and the development trend of firewall technology , analyzed the operating principle of Netfilter / Iptables .

本文介绍了防火墙技术的研究现状和发展趋势，分析了Netfilter／Iptables的工作原理。

There 's a netfilter ( iptables ) mailing list available , as well as one for netfilter developers .

可以使用netfilter（iptables）邮件列表，而且有一个适用于netfilter开发人员。

Also , netfilter / iptables is free and thus ideal for the people who want an alternative to expensive firewall solutions to save money .

另外，netfilter/iptables是免费的，这对于那些想要节省费用的人来说十分理想，它可以代替昂贵的防火墙解决方案。

In chapter five , the thesis firstly introduces the practical basis of the packet classification prototype system & Netfilter / Iptables framework , which exists in the whole system .

在第五章中，我们首先介绍了构成我们整个流分类原型系统的实践基础&Netfilter/Iptables框架，这个框架贯穿整个流分类原型系统。

As you now have everything in place and the netfilter / iptables system should be running , you will need to build rules and chains to filter packets .

现在，一切都已妥当，并且netfilter/iptables系统应该正在运行，接下来，需要建立一些规则和链来过滤信息包。

Visit the home page for the netfilter team to find lots of excellent resources , including the iptables sources , and Rusty 's excellent " unreliable guides " .

netfilter小组的主页上有许多优秀的资源，包括iptables源码，有Rusty的优秀作品“unreliableguides”。

The netfilter / iptables IP packet filtering system , although referred to as a single entity , is actually made up of two components : netfilter and iptables .

虽然netfilter/iptablesIP信息包过滤系统被称为单个实体，但它实际上由两个组件netfilter和iptables组成。

Hardware : To use netfilter / iptables , you need to have a system running a Linux OS that is connected to the Internet , a LAN or a WAN .

硬件：要使用netfilter/iptables，需要有一个运行LinuxOS并连接到因特网、LAN或WAN的系统。

The netfilter / iptables IP packet filtering system is the latest among Linux packet filtering solutions like ipfwadm and ipchains and is also the first one to be integrated into the Linux kernel .

在如ipfwadm和ipchains这样的Linux信息包过滤解决方案中，netfilter/iptablesIP信息包过滤系统是最新的解决方案，而且也是第一个集成到Linux内核的解决方案。

The netfilter / iptables IP packet filtering system is a powerful tool that is used to add , edit and remove the rules that a firewall follows and consists of while making packet filtering decisions .

netfilter/iptablesIP信息包过滤系统是一种功能强大的工具，可用于添加、编辑和除去规则，这些规则是在做信息包过滤决定时，防火墙所遵循和组成的规则。

The biggest advantage of netfilter / iptables is that it can configure stateful firewalls , an important facility that its predecessors like ipfwadm and ipchains were unable to provide .

netfilter/iptables的最大优点是它可以配置有状态的防火墙，这是ipfwadm和ipchains等以前的工具都无法提供的一种重要功能。

In this paper , we first analyze the principle of netfilter / iptables , and then bring up a scheme of grouping the firewall rules to prompt the rule match efficiency . At last we implement it in Linux .

文章在对netfilter/iptables工作机制进行分析的基础上，提出了基于防火墙规则分组的方法提高规则匹配效率的优化方案，并在Linux下进行了具体实现。

From kernel 2.4 , Linux used Netfilter / IPtables as firewall , which can provide mighty function of filter and capacity of being extended , and it is easy for user to define and extend new modules of filter .

Linux操作系统从内核2.4开始配置Netfilter/IPtables软件作为防火墙，既提供了强大的过滤功能，同时又具有很强的功能扩展能力，方便用户自己定义和扩展新的过滤模块。

Linux is an open source operating system and has good network performance ; furthermore , the firewall subsystem Netfilter / iptables in Linux kernel 2.4 / 2.6 is concise , having high efficiency and good extensibility , which is chosen as the base of a firewall by many developers .

Linux具有良好的网络性能和开放源码的特点，而且Linux2.4和2.6内核的防火墙子系统Netfilter/iptables简洁高效、可扩展性好，使越来越多的开发者选择它作为防火墙的实现基础。