随着Internet的迅速发展,网络中因为IP地址信息泄漏而遭受的攻击日益严重.通过代理服务器来隐藏内部网络设备IP地址的传统方式,不仅影响数据传输速率,而且其本身也易成为攻击的目标.针对这一亟待解决的问题,基于Netfilter/iptables模块和IP地址替换技术,在Linux环境下通过DNAT和SNAT,以及多线程系统调用的方式实现了静态IP和DHCP动态分配IP的地址信息隐藏.通过网络实验证明,达到了预期的目的.%With the rapid development of Internet, the attacks caused by the IP address leakage become more and more serious. The traditional way to hide the IP address through a proxy server affects the data transmission rate and the proxy server could become the easily-attacked target. In response to this problem, the hiding of the static IP and DHCP dynamic IP address information is implemented with Netfilter/iptables modules and IP address substitution technique, through DNAT, SNAT and multiple threads in Linux OS. The experiment shows that it achieves the desired results.
展开▼
