LINUX防火墙设计与实现英文翻译

《LINUX防火墙设计与实现英文翻译》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、西南交通大学毕业设计（英文翻译）FirewallandProxyServerHOWTO防火墙和代理服务器指南年级:学号:姓名:专业:计算机科学与技术指导老师:二零零八年六西南交通大学本科毕业设计(英文翻译)第1页FirewallandProxyServerHOWTOMarkGrennan,mark@grennan.comv0.80,Feb.26,20002.UnderstandingFirewallsAfirewallisastructureintendedtokeepafirefromspreading.Buildinghavefirewallsm

2、adeofbrickwallscompletelydividingsectionsofthebuilding.Inacarafirewallisthemetalwallseparatingtheengineandpassengercompartments.InternetfirewallsareintendedtokeeptheflamesofInternethelloutofyourprivateLAN.Or,tokeepthemembersofyourLANpureandchastebydenyingthemaccessthealltheevil

3、Internettemptations.;−)Thefirstcomputerfirewallwasanon−routingUnixhostwithconnectionstotwodifferentnetworks.OnenetworkcardconnectedtotheInternetandtheothertotheprivateLAN.ToreachtheInternetfromtheprivatenetwork,youhadtologontothefirewall(Unix)server.Youthenusedtheresourcesofthe

4、systemtoaccesstheInternet.Forexample,youcoulduseX−windowstorunNetscape'sbrowseronthefirewallsystemandhavethedisplayonyourworkstation.Withthebrowserrunningonthefirewallithasaccesstobothnetworks.Thissortofdualhomedsystem(asystemwithtwonetworkconnections)isgreatifyoucanTRUSTALLofy

5、ourusers.YoucansimplesetupaLinuxsystemandgiveanaccountaccountsonittoeveryoneneedingInternetaccess.Withthissetup,theonlycomputeronyourprivatenetworkthatknowsanythingabouttheoutsideworldisthefirewall.Noonecandownloadtotheirpersonalworkstations.Theymustfirstdownloadafiletothefirew

6、allandthendownloadthefilefromthefirewalltotheirorkstation.BIGNOTE:99%ofallbreak−insstartwithgainingaccountlevelaccessonthesystembeingattacked.BecauseofthisIdon'trecommendthistypeoffirewall.Itisalsoverylimiting.2.1FirewallPoliticsYoushouldn'tbelieveafirewallmachineisallyouneed.S

7、etpoliciesfirst.Firewallsareusedfortwopurposes.1.tokeeppeople(worms/crackers)out.2.tokeeppeople(employees/children)in.WhenIstartedworkingonfirewallsIwassurprisedtolearnthecompanyIworkedforweremoreinterestedin"spying"ontheiremployeesthankeepingcrackersoutoftheirnetworks.Atleasti

8、nmystate(Oklahoma)employershavetherighttomonitorphonec