Design And Implementation Of Personal Firewall Based On Windows

With the development of computer hardware technique and popularize of use network, it’s become more and more obviously that can’t do without network in people’s daily life, work, and learning. However, computer network is a rapier, on the one hand computer network is very convenient to user, on the other hand network security issues is more and more extrusive, whether enterprise user or personal user, all be network threaten at all times. So, it need pay more attention to protect of users’ computer and network.In this paper, we considered to design and implement a personal firewall software aim at personal user, and to protect personal computer out of security threaten in a certain extent.This paper introduces development course and class of personal firewall software, analyses main design technique of personal firewall software. First, this paper introduces the necessity of studying personal firewall, and development course of personal firewall. Secondly, introduces in detail the working principle of firewall, classification of firewall and network protocols, analyses and compare the network packet interception technology based on Windows. Finally, on the basis of analysis about function necessaries and capability necessaries of simple personal firewall based on Windows, the goal is put forward for system design, introduces in detail design thread and process flow, and systematically discusses components of firewall.The firewall system in this paper uses the Visual C++6.0as development tool, makes use of Winsock2SPI, completes interception and capture of network packets, analysis of network packets, and disposal of network packets, implements a simple personal firewall based on Windows. In this firewall system, control rules can be added, deleted and stopped. According to control rules, it can achieve the packet filter based on IP address or ports. It reached prospective targets by test, and it basically solved the problem of personal computer users’ network connections security. On the basis of results, some proposals are put forward for further research.