Abstract: In this paper, a new method is introduced to implement user access control based on IPChains. The combination of "Challenge-response" authentication and dynamic adding access rules according to user is adopted to implement user access control. The method can effectively solve the existing defects of user access control in traditional packet filtering firewall. The key technologies of implementation are analyzed in detail.

摘要： 在Linux内核IPChains基础上，采用"挑战-应答"身份认证机制与动态地增加以用户身份设定访问规则相结合方法，实现内部用户的访问控制，可以有效地解决传统包过滤防火墙对内部用户访问控制存在的缺陷，文中对其关键技术进行了详细剖析。

关键词: 防火链, 访问控制, 挑战-应答, 身份认证

CLC Number: 

• TP316.81