Development of a Proxy-firewall on Linux Platform

Abstract

Abstract: This paper describes a proxy-firewall to control WWW access and speed up the access task. This firewall is running on Linux OS. We use TCP/IP headers and Mac address of the host to check the www request. To improve the security of the firewall, we use the digest-based scheme to transfer the account data. To optimize the performance of the proxy, we deploy the peer-group scheme to share the cache data.

摘要： 该文说明了基于Ｌｉｎｕｘ平台针对ＷＷＷ访问控制与优化而设计的代理型防火墙，该防火墙在ＴＣＰ／ＩＰ五元组审查的基础上，还对源主机的Ｍａｃ地址进行审查，提高了系统的安全性．为了进一步提高系统的安全性，系统采用了Ｄｉｇｅｓｔ认证方案，可以比一般的ｂａｓｅ认证方案提供更高的用户认证信息传送的安全性。为了对代理的性能进行优化，系统还引入了缓存共享技术，借鉴ＣＡＲＩ，等方式提出了ｐｅｅｒ－ｇｒｏｕｐ方案，使得性能得到提高。

关键词: 代理, 防火墙, 缓存共享

CLC Number:

TP393.08

Yang Jinsheng, Jin Zhigang, Hu Lin, Yao Weidong. Development of a Proxy-firewall on Linux Platform[J]. , 2000, 26(S1): 190-193.

杨晋生,金志刚,胡琳,姚伟栋. 基于LINUX的代理型防火墙开发与应用[J]. , 2000, 26(S1): 190-193.

/ Recommend / Download Citations

URL: https://www.ecice06.com/EN/Y2000/V26/IS1/190

[1]	ZHU Wenfeng, WANG Qin, GUO Zheng, LIU Junrong. Research on Attacks Method for Block Ciphers [J]. Computer Engineering, 2020, 46(1): 102-107,113.
[2]	HOU Fangjie,WANG Lei,WANG Song,SHENG Jie. Position-based automated protocol reverse analysis method on network flows [J]. Computer Engineering, 2019, 45(5): 84-87.
[3]	WEI Fang,ZOU Zhige. RFID Tag Group Ownership Transfer Protocol Satisfying Backward Security [J]. Computer Engineering, 2019, 45(4): 136-141.
[4]	WANG Hui,WANG Yincheng,LU Shikai. Attack Path Optimization Algorithm Based on Time Gain Compensation Rate [J]. Computer Engineering, 2018, 44(8): 184-191,198.
[5]	WANG Hui,LU Shikai,WANG Yincheng. Intrusion Prediction Algorithm Based on Correlation Attack Graph [J]. Computer Engineering, 2018, 44(7): 131-138.
[6]	WANG Yan,LIU Jiayong,LIU Liang,JIA Peng,LIU Luping. Research on Vulnerability Utilization Tool Development Framework [J]. Computer Engineering, 2018, 44(3): 127-131.
[7]	ZUO Xiaojun,DONG Limian,QU Wu. Fast-Flux Botnet Detection Method Based on Domain Name System Traffic [J]. Computer Engineering, 2017, 43(9): 185-193.
[8]	LU Siyan,LAN Shaohua. A Construction Method of Covert Channel Based on File Storage Distribution [J]. Computer Engineering, 2017, 43(9): 199-204.
[9]	LAN Geng,LIU Daowei. Group RFID Tag Ownership Transfer Protocol Based on Word Synthesis Operation [J]. Computer Engineering, 2017, 43(8): 151-155.
[10]	SHEN Yuan,GAO Ling,GAO Ni,WANG Fan. Hierarchical Attribute Reduction Model for Intrusion Detection Based on Cultural Algorithm [J]. Computer Engineering, 2017, 43(7): 175-181.
[11]	PENG Yanbin,TIAN Ye,PENG Xinguang. An End-to-End Lightweight Authentication Protocol for Medical Wireless Body Area Network [J]. Computer Engineering, 2017, 43(6): 73-77.
[12]	MAO Qianren,WANG Chaobin,BAO Xiao’an,LI Yanmei. Research on Guidance Mechanism of Internet Public Opinion Based on Cellular Automaton Model [J]. Computer Engineering, 2017, 43(6): 105-110,117.
[13]	HU Jipeng,TAN Li,YANG Minghua,ZHANG Yaming. A User Behavior Measurement Method Based on Trusted Cryptography Module [J]. Computer Engineering, 2017, 43(5): 121-128.
[14]	LIU Xinliang,DU Ruiying,CHEN Jing,WANG Chiheng,YAO Shixiong,CHEN Jiong. Security Threat and Defense Method for SSL/TLS Protocol Session Key [J]. Computer Engineering, 2017, 43(3): 147-153.
[15]	LIU Weiming,GAO Xiaodong,MAO Yimin,ZHOU Zhaofei. Research and Application of Uncertain Genetic Neural Network in Landslide Hazard Prediction [J]. Computer Engineering, 2017, 43(2): 308-316.

Please choose a citation manager

Content to export