Network Security And Firewall Three-port Design And Implementation

With the constant development of Internet applications, network security has become an important issue can not be ignored. Firewall technology is a top priority in this field. The firewall technology has been in a leading position abroad, but because of the special nature of network security issues, we can not completely rely on foreign technology for their network security, protection, network security and firewall technology for research in the field of security of our country is of great significance. Developed based on the Linux firewall, both can also learn to make the products with independent intellectual property.In this paper, drawing on research results at home and abroad on the basis of the design to meet the needs of China's network security needs of small and medium sized units for the purpose of three-port NAT-type firewall system. In network security and firewall concepts, development and problems to be solved on the basis of the study, design and implement a three-port NAT firewall system, authentication, network address translation, filtering, and other major functional blocks. The firewall is to adopt a new role-based mandatory access control, anti-attack and anti-virus proxy mechanism. And two-tiered firewall design, implementation of integrated customer authentication and security control features such as a firewall system to achieve security, controllability and availability.Through simulation testing, and specific hardware experimental verification of the effectiveness of the firewall, Features a clear three-port NAT firewall, network security protection for small and medium has good performance.