38

iptables之state扩展与开启被动模式ftp-liximkuan的博客

 6 years ago
source link: http://blog.51cto.com/11975865/2090892
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
1.state扩展  该扩展至关重要,正是由于state才实现了连接追踪机制。  连接追踪机制:每一台客户端与本地主机进行通讯时(有可能是通过本地主机去访问其他主机),本地主机都会在内存的一段空间中存储源IP、源端口、目标IP、目标端口的信息(每条记录都有生存时间)。当客户端下次再与本地主机进行通讯时,就可以通过查找之前存储的信息来追踪该客户端是否与本地主机

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK