Ҩ

͹ ٴ֧ҧػóҧҧ Ѻҧѧͧ ѹͧ ǧ͸Ժ¢ кͧʹ Ѻҹҧ ͧѺѺ-ҹԴش ֧Ѩغѹ ͧ§Ѻ- ѧͧͧкʹͧ¡ " (Firewall)" ֧Դ Ѳ ѨغѹԵѳ ʹԵѳͧͧ͡ѹѺ- ͡кҹҧ

ٻͧҹá (Router) ˹ǨͺʹҧͧѺ ѧҧͧ ҧкǹ (Header) ͧ ҧҡͧҡѹͧ ˹ ͧ ǹͧ١Ѵ͡ѧ˹ͧ CPU ͧöǨͺç˹ ѴԹҹ ѴԹ ICMP (Internet Control Message Protocal) ѧѺ Ѵҧա

ҧ ͧҧѭ Դҡ CPU ͧѹͧͧ ֧ԷҾŴŧ §˹ͧ˹ ԷҾͧ͡á ŧ֧ 75 繵ͧԷҾ٧ش ͡ҡѧѭա˹ Դҡͧ͡ ͧҡҹǹҡѡٻͧҵ (Routing Table) ҵ˹ҧԴҧк ͧǨͺҧ֧ҹ ١͡Ԩóѹҹҧѹʹشǹ͹ѹ (ʹͧҧ ҧ͹ѹ ;पѹ͹ѹ) ͡ѡɳ ֧ѭѺԷҾҹҧ͹ ͧ֡ ԷҾҹŴŧҴ˹ ͧѴԹ ͧǹѹա ԧ ԨҳѴԹ§ ͧҡѹ֡ (Logging Information) ͧ´Թ ١ѹ֡ѡɳͧӹǹѺҧҧ ҧѹ֡ӾǡѡɳͧԴѹ ;पѹ (Telnet) ŴҡԹ ͧԨóǹͧء ѹͧҹ֧ͧ 30 繵 ѧ˹Ѻѹ֡ʶҹҹ ҧҧöҴ˵ءó͹Ҥѹ ͧѡɳѺҹѧ

ҧ͡

кҧԸҧ͡ѡʹͧҹ TCP/IP ͺ ԨԵԤԻ ҧͧѷ͡Եѳ¡ ;पѹ(Application Geteway) ǺѺ ͡ҡк ;पѹ¡ ͡ (Proxy Server) ¡ҧͧҡѡɳҹͧѹ áçҧҧкͧ Թͧ͡ ͧ (Request) ҡ͡ ҡͧ ;पѹѹ͡ͺʹͧͧ͵ҧ ͧҡ͡ԴѺç ҡѡɳѧ ͹ ;पѹ͹ͺʹͧͧͧ͹ ͹ͧѧҧ͡͡ա˹ ͹ͧԴ͡Ѻ͡ç ;ѹͧҹǹͺʹͧͧСͺʹͧ;पѹŷѹͧѺ FTP ͹Դ͡Ѻ Ѻ͹ѧ USER PASS ͺʹͧŢ 3 ѡ 200 ͡ҹº ͧ;पѹࡵͧ¹ ;पѹͧҡ͹ ͺʹͧҡ;पѹ˹١ͧ ͹ Ըش

ҹشѹ͹ ;पѹࡵöǺҹҧ´˹ ͹حҵ˹ҧ ˹͹حҵҧͧͧԨԵԤԺ á͹حҵ֧ҡ͡ҧ ١˹ 9,600 ԵԹҷ дѺǡѺҹ ͡ҡѧö˹Էŧö;पѹ ͧҡҧ (Configuration File) ١͡Ǻҹ˹Էҧ´ ªͧ;पѹࡵա˹ ѹ֡Դ (Logging Information) ʹҡ ҡѹҹ֧дѺ;पѹŹͧ ֧öѹ֡´зҴ ͹Ѻ §ǹͧ ͧҡ;पѹҹ͡кԺѵ (Operating System) кԺѵǹѴǡѺкѡʹ Ӥѭ ͧѹúǹҡ ҹա öʹ ͧҡ;पѹͧѧ͡

ҧ ;पѹ͹ѹ ͧҡ;पѹ ֧ͧѾҡҧҧѹ աҧ;पѹҹ ͧѴͧ͡ҹкҡ˹ͧкԺѵԡ (Operating System) ѧ˹ͧ ҹͧѴ͡Ѻ ͧ ǹشٴ֧Ѩغѹ;पѹöͧѺपѹ§ҧ ͧҺҧ ö´ www.gocsi.com/firewall.htm

ҧ;पѹͺѺҹԹӡѴ§ҧŴ͡سͧкŧ ͧҡѴѧ ӹҭ Ѻ ԴͧҴ˭к ѧͧسͧѺ;पѹӡѴ͡ԴҴŧ ͧҡسҺ ͧѧҧ

ҧ¡ҧ

ѷ Checkpoint Software Technologies ԵѳǹҴ֧ 44 繵 ҹԨͧ Yankee Group ͹չҤ 1997 Ѳ 2 Ը¡ Stateful Inspection ෤Ԥҹ áͧ ӨѴѺѡҹͧѹ ǹͧ Stateful Inspection ١ŴѧкԺѵǹ IP Stack öԨó絡͹١֧ IP ǹѹҹ Ѻáͧ絴ѧҧ

ҧԨóҧѹ ʹͧ絷͹˹ Stateful Inspection ͧʹյԨó ͧ A ͧԴ͡Ѻͧ B ͧ A ѧͧ B áҡ A ֧Ẻ Stateful Inspection Ԩóҡ ͹حҵҹ Ԩó 絨ҡͧ A 絵֧ʶҹѹѹ֡ѴԹѴԹա ҹǴԷҾҡ

Checkpoint ǹͧԨóա ͧдѺ;पѹѡɳ Ѻ;पѹҧͧҹǹ ҹ;पѹ FTP ͧԴҧ͹ PORT FTP ͹͡Ѻ ѹѧҧʹ Ẻ Stateful Inspection öͧǺҹ ѹʶҹ͹حҵҧѧ͹˹ áͧдѺöҾẺ Stateful Inspection ǹͧ Stateful Inspection ԷҾҹ٧ ѡʹ״áͧҡ ͡ҡѧͧѺҹ;पѹҡ;पѹա

ػ

˹ѹ֧ö˹ǹѡʹ ӡѴԷ֧쵢ͧ WAN ѧö˹ҹ-ѡ ԷҾҹ Ҵѹ֡´ͧԴѹ ѧá;पѹࡵ Stateful Inspection Firewall ԨóҧͧѺ ͧԧͧسͧ ;पѹöǺԷҧ кѹ֡ͧԴ (Logging) ҡ Stateful Inspection ԷҾҹ٧ ״ҹҡ


¹ : ç Ⱦѧѹ
Ե BUSINESS COMPUTER MAGAZINE
Last update : 04/03/1999