基于U盘的嵌入式防火墙的设计与实现

基于U盘的嵌入式防火墙的设计与实现 The Implementation of the Embedded Firewall System by Using a USB Flash Disk 张锦祥 ZHANG Jin-xiang~ 1 2 first-author 浙江大学计算机科学与技术学院,浙江,杭州,310027 浙江大学计算机科学与技术学院,浙江,杭州,310027 1,2 1,2 浙江教育学院计算机系,浙江,杭州,310012 浙江教育学院计算机系,浙江,杭州,310012 将Netfilter/Iptables作为一个嵌入式防火墙产品进行研究,提出了一种基于U盘的嵌入式防火墙的设计方法及其实现的技术.该防火墙基于x86硬件平台,将嵌入式系统软件全部集成在一个U盘中,并使防火墙能从U盘中启动.在设计中,该防火墙通过对Linux内核裁剪,实现了Linux系统通过USB端口中的U盘启动.同时,在系统中集成了嵌入式的Web服务器和用户的配置界面脚本程序,使用户通过Web界面对防火墙能方便地进行配置,实现其较好的实用价值. Netfilter/Iptables is an IP packet filtering system designed for the Linux Kernel. Using Netfilter/Iptables, Linux systems can be turned into packet filtering network firewalls. A considerable amount of research has been conducted on Netfilter/Iptables. This paper discusses techniques to build an embedded firewall system using Netfilter/Iptalbes, focusing on system level issues and techniques.This firewall system is based on the X86 architecture, and is small enough to fit on a USB flash disk and boots from it. The firewall also features an embedded web server.User enables to configurate the firewall system by the web. 防火墙 LINUX 嵌入式系统 Netfilter/Iptables firewall LINUX embedded system Netfilter/Iptables TP393.08 国家自然科学基金资助项目（10374072） 2005-03-01 2021-04-01 3