BLINUX防火墙设计与实现英文翻译

《BLINUX防火墙设计与实现英文翻译》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、西南交通大学毕业设计（英文翻译）FirewallandProxyServerHOWTO防火墙和代理服务器指南年级:学号:姓名:专业:计算机科学与技术指导老师:二零零八年六西南交通大学本科毕业设计(英文翻译)第24页FirewallandProxyServerHOWTOMarkGrennan,mark@grennan.comv0.80,Feb.26,20002.UnderstandingFirewallsAfirewallisastructureintendedtokeepafirefromspreading.Buildinghavefirewallsmadeofbrickwallscomp

2、letelydividingsectionsofthebuilding.Inacarafirewallisthemetalwallseparatingtheengineandpassengercompartments.InternetfirewallsareintendedtokeeptheflamesofInternethelloutofyourprivateLAN.Or,tokeepthemembersofyourLANpureandchastebydenyingthemaccessthealltheevilInternettemptations.;−)Thefirstcomputer

3、firewallwasanon−routingUnixhostwithconnectionstotwodifferentnetworks.OnenetworkcardconnectedtotheInternetandtheothertotheprivateLAN.ToreachtheInternetfromtheprivatenetwork,youhadtologontothefirewall(Unix)server.YouthenusedtheresourcesofthesystemtoaccesstheInternet.Forexample,youcoulduseX−windowsto

4、runNetscape'sbrowseronthefirewallsystemandhavethedisplayonyourworkstation.Withthebrowserrunningonthefirewallithasaccesstobothnetworks.Thissortofdualhomedsystem(asystemwithtwonetworkconnections)isgreatifyoucanTRUSTALLofyourusers.YoucansimplesetupaLinuxsystemandgiveanaccountaccountsonittoeveryonenee

5、dingInternetaccess.Withthissetup,theonlycomputeronyourprivatenetworkthatknowsanythingabouttheoutsideworldisthefirewall.Noonecandownloadtotheirpersonalworkstations.Theymustfirstdownloadafiletothefirewallandthendownloadthefilefromthefirewalltotheirorkstation.BIGNOTE:99%ofallbreak−insstartwithgaining

6、accountlevelaccessonthesystembeingattacked.BecauseofthisIdon'trecommendthistypeoffirewall.Itisalsoverylimiting.2.1FirewallPoliticsYoushouldn'tbelieveafirewallmachineisallyouneed.Setpoliciesfirst.Firewallsareusedfortwopurposes.1.tokeeppeople(worms/crackers)out.2.tokeeppeople(employees/children)in.W

7、henIstartedworkingonfirewallsIwassurprisedtolearnthecompanyIworkedforweremoreinterestedin"spying"ontheiremployeesthankeepingcrackersoutoftheirnetworks.Atleastinmystate(Oklahoma)employershavetherighttomonitorphone