欢迎来到天天文库
浏览记录
ID:37323896
大小:268.21 KB
页数:25页
时间:2019-05-21
《LINUX防火墙设计与实现英文翻译》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、西南交通大学毕业设计(英文翻译)FirewallandProxyServerHOWTO防火墙和代理服务器指南年级:学号:姓名:专业:计算机科学与技术指导老师:二零零八年六西南交通大学本科毕业设计(英文翻译)第1页FirewallandProxyServerHOWTOMarkGrennan,mark@grennan.comv0.80,Feb.26,20002.UnderstandingFirewallsAfirewallisastructureintendedtokeepafirefromspreading.Buildinghavefirewallsm
2、adeofbrickwallscompletelydividingsectionsofthebuilding.Inacarafirewallisthemetalwallseparatingtheengineandpassengercompartments.InternetfirewallsareintendedtokeeptheflamesofInternethelloutofyourprivateLAN.Or,tokeepthemembersofyourLANpureandchastebydenyingthemaccessthealltheevil
3、Internettemptations.;−)Thefirstcomputerfirewallwasanon−routingUnixhostwithconnectionstotwodifferentnetworks.OnenetworkcardconnectedtotheInternetandtheothertotheprivateLAN.ToreachtheInternetfromtheprivatenetwork,youhadtologontothefirewall(Unix)server.Youthenusedtheresourcesofthe
4、systemtoaccesstheInternet.Forexample,youcoulduseX−windowstorunNetscape'sbrowseronthefirewallsystemandhavethedisplayonyourworkstation.Withthebrowserrunningonthefirewallithasaccesstobothnetworks.Thissortofdualhomedsystem(asystemwithtwonetworkconnections)isgreatifyoucanTRUSTALLofy
5、ourusers.YoucansimplesetupaLinuxsystemandgiveanaccountaccountsonittoeveryoneneedingInternetaccess.Withthissetup,theonlycomputeronyourprivatenetworkthatknowsanythingabouttheoutsideworldisthefirewall.Noonecandownloadtotheirpersonalworkstations.Theymustfirstdownloadafiletothefirew
6、allandthendownloadthefilefromthefirewalltotheirorkstation.BIGNOTE:99%ofallbreak−insstartwithgainingaccountlevelaccessonthesystembeingattacked.BecauseofthisIdon'trecommendthistypeoffirewall.Itisalsoverylimiting.2.1FirewallPoliticsYoushouldn'tbelieveafirewallmachineisallyouneed.S
7、etpoliciesfirst.Firewallsareusedfortwopurposes.1.tokeeppeople(worms/crackers)out.2.tokeeppeople(employees/children)in.WhenIstartedworkingonfirewallsIwassurprisedtolearnthecompanyIworkedforweremoreinterestedin"spying"ontheiremployeesthankeepingcrackersoutoftheirnetworks.Atleasti
8、nmystate(Oklahoma)employershavetherighttomonitorphonec
此文档下载收益归作者所有