Tìm hiểu về Firewall
Bạn đang xem bản rút gọn của tài liệu. Xem và tải ngay bản đầy đủ của tài liệu tại đây (403.82 KB, 30 trang )
!
"#$%"&
'( )
*"+&"#$%"&
*",'( )
"#/0123""#$%"&
45 !
6
78."999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999996
-:;:99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999<
=:>99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
=:?5@9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999A
@2999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
CD"E9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
FGH8999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
-:/9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
7CI"&J&999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
K:9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
3L"2"MJ&N099999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999B
;D2N9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999O
!CI"P*",9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999Q
69;HRE999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999Q
<94J9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999Q
9!S "0999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999T
A9!J1U99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999996V
!CI"PP "#/0123"WU9999999999999999999999999999999999999999999999999999999999999966
697X"99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999966
<9Y&&F#9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999996
9!;F#99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999996B
!CI"PPP4599999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999996T
6945=ZL[R999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999996T
<945\L[R9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999<6
945\L\][R9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999<<
969\EL:"R[R9999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999<A
9<945"^&"""99999999999999999999999999999999999999999999999999999999999999999<_
<
9945"^&"RR"9999999999999999999999999999999999999999999999999999999999999999<O
!CI"P45;`999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999<Q
Xa99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999<T
[67XU" "66
[<Y&&"# "6<
[\EL:"X5K,*"b" "6A
[A!*"b"cd;F#e "6O
[B X5LdLR "6Q
[_ X5\L[R "<V
[O X5\L\][R "<<
[Q REL:"R[R "<A
[T45"^&""" "<B
[6V45"^&"RR" "<_
P7 P&
!7 RRR!7
7 RU7
\-7 \&RU&
=\ =\
=-f =gLf
h=7 hR="7
\;P7 \;P7
P!-7 PX!-RR"7
\\[ \\
\-7 \&X-"7
777 777
A
!"
GV: #$%#
Nhóm sinh viên thực hiện: &'#()
*+#(,
-./012
34
'"&"@iIJXJUG"C
S ""#/j123"W9
52624
'%Xk@]@J#/N229
'R8l]#3J+&j)9
! @""5&jX52""&W"J/Cm"
Ln
*74
3L"2"MJ&N0
*",9
"#/j123"9
!JXX59
B
_
8
"D]*.""."2"&J)1>R.23"l
P&*]5)a%I9-%123"W"N5o
/J#0l]a`K"]a`Lp3)2)
N52"2C+"/S&J9XJ2C+2C
2"a,#5)2#9
'C+Ro2M"jWCD"".GH8"2q
2rr9
=D"o2b15/nb5R
"2C+Ro"&j"&2sWN#2"23
JK)9
!"taI.GH8"D"22q"&
2suLn")9
9-:
"#6AJ"T <V6A
O
,5;4<=>0?@!!
AB%C"
6TQV.""CD"E123"9
6TQQvUU-"3="w,&!&&JK"
CD"E%"9
? 6TQVm6TTVK"CD"ES<SNC+2D9
6TT<]LY=\2q&JK"CD"
E"%5SCrRRx9
6TTAlyd62D9-35SWJCD"E&t#
2q2C+Lo/.""47t#9
DBE6
`"p"M"K?3Xk`5X5"t8#Lo"2
" zl15a19".""1"."l3Xk
`2C+0+&K"1"2K"Ro#`&J&^&l]a
J"M."3]315Rot8`&X.""K
K"9Cũng có thể hiểu Firewall là một cơ chế (mechanism) để bảo vệ mạng tin
tưởng (Trusted network) khỏi các mạng không tin tưởng (Untrusted network).
Thông thường Firewall được đặt giữa mạng bên trong (Intranet) của một công
ty, tổ chức, ngành hay một quốc gia, và Internet.b0]a`."l
" zRo#`&X.""K?]/"cPe)#`&
?]/"cPem3RK2Hu)2H/P9
Q
FB,G(H
Chức năng chính của Firewall là kiểm soát luồng thông tin từ giữa Intranet và
Internet95`&I52XLb".""p1"]/"cPe
1"P9
!:
• !&^&z)p"LH:#`&"c?P
Pe9
• !&^&z)p"LH:&^&#`&"c?P
Pe9
• LiM"Lp1""pPP9
• 4RJ2Hu#`&l)2Hu#`&9
• 4RJ"CDREL:"#`&W"CDREL:"9
• 4RJ3L"."."C#/1"
HC"IJ0?@!!4
CD"E2C+tC6]S@"pJ#0cz1":]3d
Xe61"XJcCPel2XCC+"#`&Lp
95X."CD"ElJM"LpX."H])
XRoa{9!bmCD"E2C+X01lLp#
X."R>LJ5`&/CD"E,#29
5J#0W]1X."2C+]alX]1X5KPl)aJ
"."1"22C+&^&l5Xl|lR#
`&)#@&."J8a]1/J#09!"2zJ
21q2)."ULp/J#09!"REL:"J#0a
]12)."3J#0W"2zL"&XJX5KP9
-3U"&]1JX}"23CmX25K"
W]19
T
>0?@!!KLM7!NO)
• !K"1[X"
• !K"1RE2*q
• ?KJLH:20X~
• )."o5&
• "3
• .JJS "WK"c=#Re
• ;("CD,aHK"
• •5K"CD
PB,6!MNJ0?@!!
>0?@!!28G
;p"U2C+0+&/]32H#5
&Q4
• \EL:",a"]aJ#0nS]a
`3J#02I9
• 4."2C+1CU&Nc4."/S "l
/,#@CU&Ne9
• &NS"123"{N")&IU&NcN"
XN"R&e9
• &NS"X."X2C+3L"W"9
>0?@!!284
;p"U2C+2z/J#WcRe
&Q4
• 01/]mJS "
• [123"{N"IU&NS"
6V
• !X2C+3L"J"
,5;;4.3!HMN:R
J0?@!!
,628RJ0?@!!4
• 3%&Xc&XdU"e9
• !*"S"L:"cY&&d"##&t#Re9
• !*"1c!"#e9
ABS?>!?0
B-.3!TMN:
3%"&^&#?K&X`2C+9X
]321Lp2,#52Ht21Lp2}q3"JRK
JR#X."9!JR#Lo/J."{&XL]"M
J."R
• 'HuP7"McP7\YLLRRe9
• 'HuP720cP7=RYLLRRe9
• 7c!7lh=7lP!-7lP7e
• !7€h=7R&
• !7€h=7LR&
• =1"."]JP!-7cP!-7RR"#&e
• !*""25cP"UU&Xe
• !*""2c•"UU&Xe
66
[67XU"
5R%"2C+}q&X2C+#,Ul5
X."&XR>]H]}29D`#U" a2C+JX5K
JJ#Wz1"22C+tJ2HlzX#`&
K"1"3]3?p"2HuX."&^&9"lXRJJ
*"UXa "u&^&3RK1X5K)2H
J1J#W2zp"LH:2c\\[l\-7l7‚e2C+
&^&m1#2C+/K"1":]39
KBUV
U4
d'RKJK"U22C+REL:"]3%"9-3"p"C
2W&CI"&J&L"]3%"&0)&I5%"2qRƒ
"J9
d"l]3%""RK2Km"CDREL:"JS"L:"`#
X."#/N"CDREL:"&aJ"a9
-V4
d2H"„J523%"3XJ&S1&l2b}"CD
,aH1"N]55JLH:lJL1"&X
L94#/N%""mlJR"{/&S1&L2
)X,aj2X9
6<
d=Lo/LWJ&X/]3%X."XRJ2C+3
L"."W&X9!J&X#,n"p"
23"mj2M @&."#&J1WX…t)9
DBW22!MX?@.
B-.3!TMN:
'8#31U2C+5X5L "CD"S "XRJJ
1LH:l"S#`&K"1"9!I5123"WLo
/JS"%&t#R97t#RJ]3L2z]2z
/*"c"#e?"S"L:"95"CD,aH1"X."2z
&t#R3S"L:"2lLH:CI"S"R>X."2C+"
)&L2X."#.",U9"l&t#L
2C+2H)2(+u3RK2z2"S"L:""CD,a
H)&`2C+"X?Kp"2z2XJ9
[<Y&&"#
-3*"S"L:"CD"2C+C3RR]{2C+
5X52z]2K"1Ro)."?]/"9p"]&J&2a]a
W3RR
6
dRR.1#JRcRReWJ
&N2c•&"R#Re9!JR#
2C+5X5#/:20K"1Ro)."2
c•&"R#ReG"C2a]aRo0+&U9
d!up"LH:"CD,aH1"N5m
2C+2z/RRl2I"au53LH:X."
2C+2zlX."]H)."9."CD"lu3RK"m
1JS"L:"JLH:l=\l7l\-7tJo
R2C+2z/RR9
dRR#/NS23XJ0L:C
R&RRL#RL9
-(&t#2C+2z)2&^&#`&u3RKJJ#W
)2H9'#"„"]32z25`&(&t#u
2"m3RKJ#W/K"9
-(&t#L#3,#`Xj"^&1]35WLp
1"2,9'#"„]32z25`&(&t#
u2"m3RKJ#W/K"9
-(&t#223`&mJ&t#XJ/RR9'#&^&
L$L"2z3&t#m#J"s3&t#9
KBUV
U4
d!&^&"CD,aH2X2C+?"LH:/
1"l]{S"L:"&t#15]3,#52Hp"J#W
#`&]{JLH:9
d!*"S"L:"&^&X23tJo)K`#Xj"
^&1."#`&K"9
6A
d†%*"S"L:"L$L")XIRm]3%
"9
-V4
d!N&aRo)/J#R2R#`&JLH:
&t#90L:9
FB,0??!X?@.
!;F#Z*"b"Z3S "2z]o
]{3*"S"L:"9!*"b"2I"au#5&JX5K
!7X."o])X323"tEj#%"9
[R%323"REL:"X5K,*"b"9!*"
b"2I"a#5&X5K,UX."o3Ro
Xl%#2XJW:9!*"b"C3R+
L8#lR^&J]#"pX5K]/"cRLeJX5K]/
"cRLe9#/RoX5K#t)?K"
U/L)."1"3]39
[\EL:"X5K,*"b"
!*"b"CD"2C+REL:"p"X5K"9‡2m)
3RR2C+)C3(+&")&*"S"
6B
L:"p"X5K25*"b"JX5K29'#
K"UL$L"REL:""CDL""1"3]3Ko5&
#8&mJLH:l"Xn")&S "]a1"
3]3?p"Ro)."]/"9
-.3!T
'8#312C+5X52 "CD"S "XRJJ
1LH:l"S2C+&^&#`&K"1"9!I51
23"WLo/JS"%7t#R97t#RJ]3L
2z]2z/"#?"S"L:"95"CD,aH1"X."
2z&t#L3S"L:"2lLH:CI"S"R>X."2+"
)&L2X."#.",U9"l&t#L
2C+2H)2(+u3RK2z2"S"L:""CD,a
H1")&`2C+"X?Kp"2z2XJ9
-3*"S"L:"CD"2C+C3&J2c]RRel]{
2C+5X52z]2K"1Ro)."?]/"9p"]&J&
2a]aW3]RR
• RR.1#JRcRReWJ&N
K"c•&"R#Re9!JR#2+5X5
#/:20K"1Ro)."•&"\#RlG"
2a]aRo0+&U9
• !up"LH:"CD,aH1"N5m2C+2z
/]RRl2I"au53LH:X."2C+2zl
X."]H)."9."CD"lu3RK"m1JS"L:"
JLH:l=\l7l\-7tJoR2C+2z/
]RR9
• RR#/NS23tJoXJl0L:CR
&RRL#RL9
6_
• -(&t#2C+2z)2&^&#`&u3RMJJ#W
)2H9'#"„"]32z25`&(
&t#u2"m3RKJ#W/K"9
• -(&t#L#3,#`Xj"^&1]35W"
.",l(RoX5KlXa"D"X5K9`Xj#)
0"L)5#" zX…&J19
• -(&t#223`&mJ&tRXJ/]RR9'#
&^&L$L",J2z3&t#ml#J"s.&t#2"
)29
U
• !&^&"CD,aH1"2X2C+?"LH:/
1"l]{S"L:"&t#15]3,#52Hp"J#W
#`&2C+]{JLH:9
• !&^&"CD,aH1"2X2C+p"LH:
&^&l]{Ro@"zWJ&t#JLH:CI"S"
"„JLH:)#]HXJ9
• !*"S"L:"&^&X23tJo)Kl`Xj"
^&1."#`&K"9
• ;`%U"*"S"L:"L$L")XI
Rm]3%&X9
9N
• •/NJRR#2*Jlz#2*&N2q2z/
J##`&JLH:&t#9!ˆ"1l#`&
,*"S"L:"2b}]Cm2KmJ#WSX."&a
3]Cm.9#/lG"2q3RK&N&^&S"
6O
L:"/*"S"L:""RKl]"J&^&RuJ#
20SX."&a*"S"L:"/9
• !*"b"cd;F#e
[A!*"b"cd;F#e
• !*"b"3S "2z]o2C+]{3*"
S"L:"9!*"b"2I"au#5&c#eJX5K!7
X."o])X‰323"tEj#%&X9
• [LCm28#1323"REL:"K,*"b"9
!*"b"2I"a#5&X5K,UX."o
3RoXl%#2XJW:9!*"b"
C3R+L8#lR^&J]#"pX5K]/"cRL
eJX5K]/"cRLe9#/lRo
X5K#t)?K"UlL)."1"3
]39
• !*"b"CD"2C+REL:"p"X5K"lIJ
,aH1"`RoC{"p""IDL"]/"9‡2m
)3]RR2C+)C3(+&")&
!*"S"L:"p"X5K25l*"b"JX5K29
'#K"]SCD"EL$L"REL:"p""D
"1"3]3Ko5&#`&mJLH:Pl"
Xn")&S "]SCD"E2]a1"3]3?p"
Ro)."]/"9
6Q
,5;;;4E0Y>0?@!!
45=ZL[R
45\L[R
45\L\][R
ABE0Y!ZM?I9MC
X5X=dLR2C+t8#Lo"Lo/J#0
LdLR9-3J#02C+"%LdLR508
XUl"„J#2"@L1""5&m1"
XJlL2J#0#2"b945LdL
R)2I"alJ#LdLR{"pl3]/2C+Km
]/b1mm1"3]3c1"N2C+]ae9
[B X5LdLR
=dLRu")&JLH:]"JW#,#c&t#e
z&^&R2 "`&o5&LdLR9-%"5&?3
6T
R"3]3R]/"2]H)lLdLRI"5&
L#)9
UR![M?IMC4
d!2zL$L"lX."#/N&NS"z&N2z]9
d=dLRu#/N)Xa "#J"lL2/J
2tuN)18W22W9
-VR![M?IMC4
d4."2J&S"2C+p"#/N]a`"#"&S1&lG"C
p"&Nm2C+"/HCD"9
d4."Xa "K"2sp"3)."0]a8W
LdLRlXLdLR]H23`&R>{IjC{"
2)."1"3]3l"CD)."cXeR>)#2C+]3C
C+"/1"9
&66S0YI![M?IMC
'")&LH:"CDREL:""1"3RK"a&J&CR
d45+&mJ&t#R")&p"&t#R
d!)&J"CDREL:"/J#LdLRlX"CDREL:"
KREL:"LH:?#LH:?tX%&a2 "
`&]"R&RRL2C+Rƒ/LdLR9
5L"&t#RX")&2C+LH:"CDRE
L:"X."&aLH:G"&N&t#R&t#9
-zXJlXRKLH:")&Xa "2J&S"WK"]H
"atK")aJ&t#R22z/"3J#9
5L"&CI"&J&"CDREL:"/J#LdLR
"CDREL:"X."0(N%KREL:"LH:&a2 "`&
J#LdLR9
<V
DBE0Y\0???I9MC
\LR)"C+1m)LdLR945
#")&JLH:?3R]/"1"3]3c]RRRe3
JDm1"]/"945#X5+&Xk`2&X
U"&t#R97XU"2C+/9RR2C+
2z]/"1"3]3K"L#)p"R/
X5Kml])X3K"]/"K"@#`&K"
zJLH:]/"2&aX5KmR#95RRN
2C+L#{523]a`l&XU"G"&^&]RR
{X5K]/"9
[_ X5\L[R
d7XU";%3RK1LH:K"K")&REL:"
&t#Rl]@""CDREL:"5KL"LH:&aX5K25
&t#RX."2C+]},&t#R2X5Ko5&m1"]/
<6
"€]/ "l 2M" D &^& R R { 3 RK X5 K m
€tR9
d7t#RRRR>SJ&t#R2&::3RKLH:
K"")&"CDREL:",&t#R9
Kiến trúc screened host hay hơn kiến trúc dual-homed host ở một số điểm như sau:
d=dLR4]aKJ##"")&LH
:l&1,#@ ]a(&NE#&N/"p0S "
52C+lG"CK232J&S"X/"2a`
S "9
d\LR'qJS "%J"P7J7t#\{J#
/"]97XU"u"pp"S "%"/XRJ
G"CX"8#(97t#R2C+2z{J#XJ/Xa "&::
"CDREL:"I{X5=dLR9
CI"oCX5=dLRlX5\LRX]H23`&
."CC+"1"WXG"]HXRJ]{X9
?X#520WX5/X5\L\][R
2D"a,#5X#52#9
FBE0Y\0???I\K?9MC
"CD"Xa "]a1"3]3lo5C+&b"
WR8l "CD"RoRRlJ]RRX}
JRXJ"CD2CX5U/\L\][R9
<<
[O X5\L\][R
45\LR]R]@"M?X5RLR]"J
/&N1""1c&Xe.`&1"3
]3X}1"]/"lJ]RRX}JR."CD"XJ9
4RLR]R2I"a]"MRL
• †"cwte"p1""11""
S "]a1""1cRRle9wt
K"1p"Ro)."ŠC"a12HuP72
X#`&mRR9‹#`U"/"#/N
REL:"LH:&t#]"Ju&^&."]@"M?
RR9
• †"cPe"p1""11"3]3
]a1"3]31""19X."o5J,#@
&XU"W]3U9!JLH:&^&
"pRR1"3]3l"p]/"1"3]3X."
)5&a"K"9Pu&^&JK"]/
"#`&RR9
<
UR\0???I\K?9MC4
d4…)."N&Js]N"]a†"lR[R
†"9
d{"u,a"]JRRm/K"1"
3]3X.")#cR]e9!u3RKK"2q2C+%
/ =-f 2C+ ]5 25 ]{ P , " ] =\
Ut"c=\e9
d{"u,a"]JRRm1"3]3/J
K"]/"1"3]3X."#`&o5&mP9'
#2a]a"p"R]/"]@]3&a#`&,P
,LH:7t#9
d'Kmp"K"#/N")&LH:
"CDREL:"2M"D8"Xa "LiC."W(
"CDREL:""K"Lp2*"pJ"CDL""
K"N2C+]aX5I]a/&+&9
d' "23"XlX5\L\][R{
/REL:"/3L1""1c&Xe2&NC
."]/"XlJ]Xm9
"lbp"X5]5XJCREL:"R
Rl"^&"""l"^&"RR
"9
FBAB\"I*CM9MC
# 2D L J #/N " c&Ue LC ?
cLL#eG"CJ]J\XJ9
<A
\EL:"3RR")&p"LH:"CDL"]/"
cReCLH:\-7l=\l7t#\‚
\EL:"3RRXJ")&LH:"CDL""P
zp""CDL"]/"ctRelCLH:7\ly]
\‚
[Q REL:"R[R
m.#K232J&S"p""CDREL:"]/"c
Re3&N2X."]HaC{"]{p"123"W"CDREL:"
]/"1"ctRe9
!"G"REL:"RRu")&3LH:
22 "K232J&S"l8" "123"9
REL:"RRJRXJ2X3R
2]H23`&zR]H}"RXJn123"K9
<B
