https://souljian.cn/tags/%E7%BD%91%E7%BB%9C-security/Recent content in 网络 Security on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088199/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088199/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>防火墙审计只在授权环境进行。</p> <h2 id="一防火墙架构">一、防火墙架构 </h2><img src="https://souljian.cn/img/firewall-arch.svg" alt="防火墙架构" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">① 包过滤 → ② NAT → ③ 状态检测 → ④ IPS → ⑤ WAF → ⑥ SDN 防火墙 </span></span></code></pre></td></tr></table> </div> </div><h2 id="二配置审计">二、配置审计 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">默认规则：是否允许 ALL 通过 </span></span><span class="line"><span class="cl">ACL 配置：是否有过度宽松规则 </span></span><span class="line"><span class="cl">NAT 规则：是否有未使用的映射 </span></span><span class="line"><span class="cl">日志审计：是否开启日志记录 </span></span></code></pre></td></tr></table> </div> </div><h2 id="三防御加固">三、防御加固 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">最小权限原则 · 定期审计规则 </span></span><span class="line"><span class="cl">关闭不必要端口 · 日志集中分析 </span></span></code></pre></td></tr></table> </div> </div><h2 id="四小结">四、小结 </h2><p>防火墙是网络安全的边界防线。<strong>最小权限 + 定期审计</strong>是防火墙安全的核心。</p>