说明：  本文首先分析Linux2.6.6内核新特性的基础,探讨对Linux进行实时化和嵌入式化,即通过配置内核,裁减shell和嵌入式C库对系统定制,使整个系统能够存放到容量较小的FLASH中。然后简单介绍了防火墙的概念,深入地分析了Linux2.6.6版新型内核防火墙netfilter框架的工作机制及其实现的方式。
(In this paper, the kernel Linux2.6.6 the basis of new features to explore on the Linux and embedded real-time, that is by configuring the kernel, the reduction of shell and embedded C library on the system customization, so that the entire system to the capacity to store more FLASH in the small. And then briefly introduced the concept of a firewall, in-depth analysis of the new kernel version Linux2.6.6 firewall netfilter framework of the working mechanism and its implementation approach.)