| 基于Linux系统实现透明网桥式安全接入点 |
| |
| 引用本文： | 曹传东,高新奇,李伟.基于Linux系统实现透明网桥式安全接入点[J].科技资讯,2009(15):23-24. |
| |
| 作者姓名： | 曹传东 高新奇 李伟 |
| |
| 作者单位： | 石河子大学信息科学与技术学院,新疆石河子,832003 |
| |
| 基金项目： | 石河子大学国家863后补助项目"基于Linux系统的室内红外无线接入点的研发" |
| |
| 摘 要： | 针对同络接入点的安全性这一特定领域，本文旨在通过混合利用ebtables和iptables的网络过滤机制，构建一个基于Linux平台的透明网桥式的安全接入点。该接入点主机系统不仅能够作为一个透明网桥实现异构LAN之阍的桥接功能，同时还作为一个防火墙可根据用户的自定义安全策略，实施对于数据帧和数据包的双重过滤，因此可有效增强接入点的安全性。
|
| 关 键 词： | 网络接入点 网桥 ebtables iptables BROUTING |
Building Secure Network Access Point Based on a Linux Transparent Bridge |
| |
| CAO Chuan-dong,GAO Xin-qi,LI Wei.Building Secure Network Access Point Based on a Linux Transparent Bridge[J].Science & Technology Information,2009(15):23-24. |
| |
| Authors: | CAO Chuan-dong GAO Xin-qi LI Wei |
| |
| Institution: | (College of Information Science ＆ Technology, Shihezi University, Shihezi, Xinjiang 832003, China) |
| |
| Abstract: | Aimed at the security of a network access point （AP）, this paper presented a kind of AP based on a Linux transparent bridge server by integrating the br--nf mechanism of ebtables with the net-filter of IPtables source projects. The system could not only offer users the functions of a bridge such as bridging isomeric LAN segments, but also could filter data-link layer＇ s frames and network layer＇ s packets simultaneously according to the user＇ s custom security policies by working as a firewall. Thus it could effectively enhance the security of AP. |
| |
| Keywords: | ebtables iptables BROUTING |
| 本文献已被 维普 万方数据 等数据库收录！ |
