资源描述:
《锁定的端口:Windows防火墙-外文翻译》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、LockingUpthePorts:WindowsFirewallOneofMicrosoft’sstrongestresponsestotheongoingbuffer-overflow-wormthreatwasacompleterewritingofthesoftwarefirewallincorporatedintoXP,2003,andR2.TheyrenamedthefirewallfromInternetConnectionFirewall(ICF)toWindowsFirewall(W
2、F).TheyalsoaddedsomethingcalledIpsecbypassthatextendsthefirewall’sabilitytoallowyoutoeasilyrequireasecureservertoauthenticatenotjustincomingusers,butmachines.Inthischapter,you’llseewhatWFdoes,whatissuesitcanraise,andhowtoconfigureitsothatitsuitsyoursecu
3、rityneedsbest.WhatIsWindowsFirewall?Howcananoperatingsystemhavefirewall,anyway?Isn’tafirewallaboxwithblinkinglightsandabunchofcablescomingoutofit?Theansweristhatthetermfirewallreferstoanyofanumberofwaystoshieldacomputernetworkfromothernetworks,networksr
4、ifewithuntrustworthypeople—youknow,networksliketheInternet.Let’sdigdownabitfurther,however,andstartwithalookatwhatafirewallis,basically.WhatFirewallsDoWiththeadventoftheLndustrialRevolution,peoplestartedbuildingthingsdrivenbysteampower,suchaslocomotives
5、,ships,andthelike.Creatingsteamrequiredfire,andfire’sascarything,atleastwhenitgetsoutofhand.Toprotectagainstfire-relatedproblems,thoselocomotives,ships,andthelikeweredesignedsothatathick,sturdy,nearlyfireproofwallexistedbetweenwhereverthefirewaskept—usu
6、allyaboiler—andtherestofthevehicle.Thatway,ifsomethingcaughtfireintheboiler’scompartment,thentheonboardengineerswouldhaveabitmoretimetoputoutthefirewithouthavingtoworryaboutthefireimmediatelyspreadingtotherestofthecraft.Lateron,westartedusinginternalcom
7、bustionenginesanthey,too,cancatchfire,sothingslikeautimobilesandprivateaircrafthavefirewallsdesignedintothem.(Infact,the“wall”referredtowhenpeoplesaythatsomethingisrunning“ballstothewall”isthefirewall.Youcontrolasmallaircraft’senginespeedbymovingaball-s
8、hapedcontrolcalledthethrottle.Pullingitbacktowardyoureducestheengine’sspeed;pushingtheballforward—“tothefirewall”—increasesenginespeed.)Basically,then,afirewall’sjobistocontainbadstuff.Butwhereenginefirewallscontainarelativelysma