Nearly all studies about future bandwidth-needs pointing out that today's access technologies will reach there design limit in the near future. So we have to think about new access networks, which cover the needs in bandwidth, quality of service and bring the three today's networks -cable-tv, telephone networks and Internet- together. The Quality of Service and Security needs depend on each other in those networks. The demands to security devices in such networks are extraordinary high. Already simple packet filtering decreases the throughput in routers or gateways to non acceptable rates. Linux include a powerful packet filtering software, -iptables-, that is used in small and medium networks for firewalls, and workstations. The aim of this paper is to present solvations for packet filter improvements. The paper point out two alternatives: software improvements and filter rules reorganization and will focus on reorganization if filter rules. We describe an automatic filter configuration for Linux packet filter based on connection parameters.
['Bernd Podey', 'Thomas Kessler', 'Hans-Dietrich Melzer']
Network Packet Filter Design and Performance