在眾多網絡安全技術中，防火墻技術是常用的一種。本文首先分析了網絡安全和防火
墻的基本概念，然后設計了一種以太網綜合型主機防火墻。該防火墻使用了包過濾技術，但是在傳統的包過濾技術上作了較大的改進，在包過濾的規則中加入了關鍵字過濾規則以及基于對TCP 連接狀態進行監測的動態過濾規則。在該防火墻中還集成了入侵檢測模塊，使得防火墻能夠對網絡中的異常情況作出響應，提高了系統的安全性。本文中還在Linux 操作系統下將該防火墻進行了實現，并對其性能進行了測試。
關鍵字：防火墻，Linux, 入侵檢測，包過濾技術
The Desgin of Campus Network Firewall Based on Linux Zhang haichun 1 Qu shuang 2
(computer department of Shijiazhuang university Hebei shijiazhuang 050035) (Shijiazhuang Information Engineering vocational college Heibei shijiazhuang 050035) 2 Abstract: Firewall is a kind of network security technology in corrunon use. In this paper, at first， the .basis conception of network security and firewall is analyzed. And then,a compositive firewall
used in host under Ethernet environment is technology, but designed. This firewall uses the PacketFilter it make some improvement over the coventional Packet Filtert ethnology. In the Filter rules, the rule basedKeyword in the Packets and the rule base TCP connection Stateful Inspect is added.-$esides these rule s, an IDS (Intrusion Detection System)module is integrated in.the firewall,which makes firewall can response the abnormal state in the network. The IDS module improve the security of host system. At the end of this paper, the realization of this firewall under Linux operation system and 'the test of this firewall is described.
Key word: Firewall, Linux, Intrusion Detection, Packet Filtert ethnology