Research And Realization Of Linux-based Network Firewall

In this thesis, the general designing scheme and realizing method of firewall is introduced, and a few kinds of key techniques are discussed. At first, the thesis explains the network security system and the concept of firewall. Secondly, the thesis brings forward the firewall's requirement analysis of function and capability, and on this base the thesis puts forward the corresponding general designing scheme. Following that, the thesis details the designing scheme, the principle, the realization and the relative key techniques of every parts of the system. Finally, a conclusion and an expectation are given in the last part of the thesis.The thesis puts forward good scheme to resolve the questions of firewall capability, communication security, use security, use convenience and function realization. And to realize the system, advanced techniques such as programming with core Linux, multiprocess, multithreading programming, deamon programming and Socket programming are used.