Based On The Internet Network Management And Information Monitoring System

BE born from the Internet the network management and the supervision technique accompany with it to develop continuously with perfect, become the important foundation of the Internet development.BE information-based continuously along with our nation universal, each business enterprise and unit include the government sections to all start build up own area net in bureau and start connect into an Internet, also brought a network management and information a safe problem, so the supervision of the network and information and management become the foundation of all works.This text takes the Linux system as foundation to design and carry out according to Internet the network management and the information supervision system.This text introduced the related network foundation knowledge first, the point introduced the IP address management technique:The IP address and Mask .Introduced the related network management technique secondly, the point related to want the fire wall technique,virtual appropriation net VPN for use and act for technique etc. in the system.End detailed manages according to the Internet network and the information supervise and control system to carry out a method, mainly is how build the network management and information to supervise and control system according to the need under the Linux system.This system mainly is under the Linux system to carry on a development, is an actual item, pay attention to the concrete implement method and step.Mainly include two parts :Mainly make use of the fire wall tool Iptables and a little bit other software packages that the Linux provide while being the network management system to carry out to carry on a valid management to the existing Internet resources(inside,the outside net IP address);Two is the information supervision system, mainly is the interview record that makes use of the outside net in the network management system supervision, and the interview record of the business data, thus can good rightness each networks addresses carry on the information supervision, mainly ising divided into the business information supervision with the non-business information supervision, limitting the non- business interview.According to to the management need of the existing network, the usage Iptables to draw up to correspond interview rule strategy.Rule established the tacit approval strategy first, deleted to have already have, refuse all data interviews;Then draw up the basic interview strategy,business correspondence strategy according to the network interview need and inside net correspondence the strategy allow the data interview of[with] demand to pass, carry out the management to the existing network.Mainly include:Allow a basic business interview, carry on the son net to divide the line to the internal network, carry on the IP address and the MAC address to bind to settle, promise the legal IP address uses normally, stopping an illegal IP address to go into a net;Open the IP turns hair, carrying out the network agency function to allow inside the net and the Internet correspondence;The restriction various non- business interview, can establish the interview strategy to take effect at appointed time, can carry on the bandwidth restriction and key word to filter etc. function.The realization carries on a valid management to the existing Internet resources(inside,the outside net IP address), carrying on a reasonable allotment, guaranteeing a network of unimpeded, and make use of an Iptables appearance mechanism to simplify the interview strategy, the exaltation interview efficiency, let up system burden.Pass to make use of Iptables of the daily record record function, carry out the outside network in the supervision management of the data exchange, supervising and control to record an internal IP address' modification record for the business data, supervising and control various network agreement(WWW,ftp,Telnet,SSH,and various correspondence software), supervising and control an...