The system has reached the datagram level intrusion isolation basically by the support of Snort detection engine and netfilter frame.

• 借助Snort的入侵检测能力和Netfilter框架,系统基本上达到了数据包级的入侵隔离。