基于Iptables防火墙规则生成的研究与实现

摘要

The core of firewall rule generation based on Iptables is rule extraction algorithm.The algorithm could figure out whether the host is attacked according to the iptables log,and extract the attacking feature information and add them to the host firewall rule set.Rule generation could effectively solve the problem of automatically rule generation in a firewall according to the actual condition of the network,which could set a good rule set for a firewall and provide a solution to ensure that the firewall rules should be closely correlated with the network access activities.%基于Iptables防火墙规则生成的核心是规则提取算法,该算法能够根据Iptables日志信息判断主机是否受到攻击,再提取攻击特征信息形成规则,添加到主机防火墙的规则集中。规则生成有效地解决了防火墙根据实际网络情况自动生成规则的问题,为设置良好规则集、确保防火墙规则应与实际网络访问活动紧密相关提供了一种解决方法。