Design And Implementation Of IPv6 Transparent Mode Firewall With Virus Filtering

With the rapid development of Internet technology, many disadvantages of IPv4 gradually reveal themselves, especially the lack of address space, the over-expansion of router tables in the backbone routers, lack in encryption and authentication for information transmitted, lack of the QoS support and so on. In order to solve these problems, IETF proposed officially the next generation IP protocol– IPv6. IPv6 has many advantages, but also brings the existing network products challenges. The firewall as the main tool of network security should change itself to suit the requirements of IPv6.With the increasing attacks on the network application layer, The existing packet filtering firewall is helpless for the spread of network worm,virus and the code with hostility. Hence, making a study of network content filtering and its product is significant very much. Hence, making a study on the design of anti-virus firewall is very necessary. And the same time, the transparent mode firewall has incomparable advantages than other mode firewall in efficiency and safety.Based on these questions, after studied on IPv6 protocol, the concept and principle of transparent mode firewall, the realization of Linux protocol stack and the kernel programming, this paper design and realize an experiment anti-virus firewall in IPv6. The firewall can get and resolve ipv6 packets and the ipv6 in ipv4 tunnel packet. It can also traverse every extension header until higher protocol layers. With the spread of the virus in the Internet, the firewall uses open source software to filter the virus in the network and ensures network security. The firewall is realized in the form of kernel loadable module, and can be install in the kernel in necessary. The experimental results show that the performance and function of the firewall are to achieve the desired objectives.