| 摘要 |
A firewall includes a user interface (21) for inputting a configuration command; a shared library (25) providing information packet filtering and management application programming interfaces; a configuration management module (23) for finding out which service is responsible for the configuration command, and a kernel component (27) for performing packet filtering, network address translation and port address translation. The firewall further comprises an access database (251) for storing access lists and access rules, a NAT database (252) for storing rules on network address translation, an interface database (253) for storing information on interfaces of the firewall of the present invention, and a pool database (254) for storing NAT pool lists. A related method for configuring the firewall is also disclosed.
|
