欢迎来到天天文库
浏览记录
ID:36437805
大小:179.50 KB
页数:25页
时间:2019-05-10
《BLINUX防火墙设计与实现英文翻译》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、西南交通大学毕业设计(英文翻译)FirewallandProxyServerHOWTO防火墙和代理服务器指南年级:学号:姓名:专业:计算机科学与技术指导老师:二零零八年六西南交通大学本科毕业设计(英文翻译)第24页FirewallandProxyServerHOWTOMarkGrennan,mark@grennan.comv0.80,Feb.26,20002.UnderstandingFirewallsAfirewallisastructureintendedtokeepafirefromspreading.Buildinghavefirewallsmadeofbrickwallscomp
2、letelydividingsectionsofthebuilding.Inacarafirewallisthemetalwallseparatingtheengineandpassengercompartments.InternetfirewallsareintendedtokeeptheflamesofInternethelloutofyourprivateLAN.Or,tokeepthemembersofyourLANpureandchastebydenyingthemaccessthealltheevilInternettemptations.;−)Thefirstcomputer
3、firewallwasanon−routingUnixhostwithconnectionstotwodifferentnetworks.OnenetworkcardconnectedtotheInternetandtheothertotheprivateLAN.ToreachtheInternetfromtheprivatenetwork,youhadtologontothefirewall(Unix)server.YouthenusedtheresourcesofthesystemtoaccesstheInternet.Forexample,youcoulduseX−windowsto
4、runNetscape'sbrowseronthefirewallsystemandhavethedisplayonyourworkstation.Withthebrowserrunningonthefirewallithasaccesstobothnetworks.Thissortofdualhomedsystem(asystemwithtwonetworkconnections)isgreatifyoucanTRUSTALLofyourusers.YoucansimplesetupaLinuxsystemandgiveanaccountaccountsonittoeveryonenee
5、dingInternetaccess.Withthissetup,theonlycomputeronyourprivatenetworkthatknowsanythingabouttheoutsideworldisthefirewall.Noonecandownloadtotheirpersonalworkstations.Theymustfirstdownloadafiletothefirewallandthendownloadthefilefromthefirewalltotheirorkstation.BIGNOTE:99%ofallbreak−insstartwithgaining
6、accountlevelaccessonthesystembeingattacked.BecauseofthisIdon'trecommendthistypeoffirewall.Itisalsoverylimiting.2.1FirewallPoliticsYoushouldn'tbelieveafirewallmachineisallyouneed.Setpoliciesfirst.Firewallsareusedfortwopurposes.1.tokeeppeople(worms/crackers)out.2.tokeeppeople(employees/children)in.W
7、henIstartedworkingonfirewallsIwassurprisedtolearnthecompanyIworkedforweremoreinterestedin"spying"ontheiremployeesthankeepingcrackersoutoftheirnetworks.Atleastinmystate(Oklahoma)employershavetherighttomonitorphone
此文档下载收益归作者所有