| 摘 要: Windows作为时下最流行的个人操作系统，研究Windows环境下的防火墙有一定的现实意义。主机防火 墙的数据包过滤算法是线性查找，其性能会随着过滤规则的增加而变得越来越差，为了提高防火墙的运行速度，对非法 数据包的拦截能力，提出一种基于HASH双链表的过滤算法，并且通过分析、比较Windows环境下网络数据包的拦截 技术，开发了一款基于NDIS6.0过滤驱防火墙软件，经过测试，它对非法数据包具有强大的拦截能力。 |
| 关键词: NDIS过滤驱动；防火墙；包过滤；HASH双链表；Duilib |
|
中图分类号: TP391.9
文献标识码: A
|
|
| Design and Implementation of the Firewall Based on the NDIS Filter Driver |
|
WANG Yawei
|
( School of Computer Science and Software Technology, Tianjin Polytechnic University, Tianjin 300387, China)
|
| Abstract: Windows as the most popular individual operating system.The research of firewall in the windows environment has certain practical significance.Host firewall packet filtering algorithm is linear search,its performance will only get worse and worse with the increase of filtering rules,in order to improve the running speed of the firewall,the illegal packet interception ability,in this paper,a filtering algorithm based on HASH double linked list,and by analyzing and comparing Windows environment network packet interception technology,developed a firewall software,based on NDIS6.0 filtering flooding,after test,it has strong ability to intercept illegal packet. |
| Keywords: NDIS filter driver;firewall;packet filtering;HASH double linked list;duilib |
