Design And Implementation Of IPv4/IPv6 Daul Stack Firewall Based On Linux

In allusion to implementing and application of IPv6 and security problems of period IPv4 transits to IPv6, the thesis designs and implements a IPv4/IPv6 dual stack firewall system based on linux.The thesis designs a EPv4/IPv6 dual stack firewall based on Linux, which chooses shield host system structure, through the research of transition policy, IPv4/IPv6 data header format, security of dual stack and system structure and designs the Daul Stack system structure used in firewall in the same time. The Packets filter Router in the system is implemented by Netfilter, Packets filter management tools in Linux. It can filter IPv4, IPv6 and IPv4 tunnle packets through IPv4 and IPv6 access control tables, which are configured by iptables and ip6tables modules of Netfilter. The application and proxy gateway is implemented by Socks64 techenology and fulfill data filtering in the application layer. Finally, testing the throughput of system in the different conditions by NetIQ Chariot tools.The paper found a dual stack firewall scheme and fulfill it by packet filter tools and application gateway, moreover analysising its performance and discussing its extend usage.