Based Intrusion Detection Linux Firewall

Recently with the development and widespread use of the internet globally,moreand more enterprises and organizations connect their private network to the internet。They can share the comprehensive resource on the internet also brings a lot of securityproblems.So it is necessary to improve the security of the internal networks.Firewallis a kind of network security technology in common use.In this paper, at first, thebasis conception of IDS and firewall is analyzed.And then,a compositive firewallbased IDS under Linux environment is designed.This firewall implements the PacketFilter technology under the frame of Linux firewall ,and IDS module is integrated inthe firewall,which makes firewall can reponse the security of host system. The IDSmodule improve the security of host system.At the end of this paper ,the realization ofthis firewall under Linux operating system and the test of this firewall is described.