ros名词中文翻译解释.doc

ros防火墙名词解释input?-?进入路由，并且需要对其处理forward?-?路由转发output?-?经过路由处理，并且从接口出去的包action：1?accept：?接受add-dst-to-address-list?-?把一个目标IP地址加入address-listadd-src-to-address-list?-?把一个源IP地址加入address-list2?drop?-?丢弃3?jump?-?跳转，可以跳转到一个规则主题里面，如input?forward，也可以跳转到某一条里面4?log?-?日志记录5?passthrough?-?忽略此条规则6?reject?-?丢弃这个包，并且发送一个ICMP回应消息7?return?-?把控制返回给jump的所在8?tarpit?-?捕获和扣留?进来的TCP连接?(用SYN/ACK回应进来的TCP?SYN?包)address-list?(name)?-?把从action=add-dst-to-address-list?or?action=add-src-to-address-list?actions得到的IP地址放入address-list列表.?这个列表要用来对比address-list-timeout?看是什么时候用address-list?parameter从address?list中移走chain?(forward?|?input?|?output?|?name)?-?使用chain得到特定列表，不同的数据流经过不同的chain规则要仔细的选对正确的访问控制.?如果?input?不是非常的确定和一个新的规则需要添加注释,transfered?through?the?particular?connection0的意思是无限的,例如?connection-bytes=2000000-0?意思是2MB以上connection-limit?(integer?|?netmask)?-?地址的传输流量控制connection-mark?(name)?-?传输中的标记后的数据包connection-state?(estabilished?|?invalid?|?new?|?related)?-?连接的状态（连接中，不规则的连接，新的连接，相互联系的连接）connection-type?连接的类型?（ftp?|?gre?|?h323?|?irc?|?mms?|?pptp?|?quake3?|?tftp)content?包的内容dst-address?(IP?address?|?netmask?|?IP?address?|?IP?address)?-?目标地址dst-address-list?(name)?-?目标地址表dst-address-type?(unicast?|?local?|?broadcast?|?multicast)?-?目标地址类型unicast?-点对点local?-?本地地址broadcast?-?广播multicast?-?多播dst-limit?(integer?|?time?|?integer?|?dst-address?|?dst-port?|?src-address?|?time)?-?目标限制Count?-?每秒最大的包数量by?Time?optionTime?-?时间Burst?-?突发的Mode?-等级优先Expire?-?终止dst-port?目标端口hotspot?暂时不做学习icmp-options?(integer?|?integer)?-?ICMP?选择in-interface?(name)?-?进入接口ipv4-options?(any?|?loose-source-routing?|?no-record-route?|?no-router-alert?|?no-source-routing?|no-timestamp?|?none?|?record-route?|?router-alert?|?strict-source-routing?|?timestamp)any?-?match?packet?with?at?least?one?of?the?ipv4?optionsloose-source-routing?-?match?packets?with?loose?source?routing?option.?This?option?is?used?toroute?the?internet?datagram?based?on?information?supplied?by?the?sourceno-recor