VI. CONCLUSION & FUTURE SCOPE
The present paper covers the up-to-date outline of existing algorithms reported in the literature for making effective software based Linux firewall using iptables. Using iptables there are many flaws exists such as code duplication, the problem in defining news rules, a single action can be performed using single rule, etc. whereas nftables covers all these above flaws existing in iptables. Basically, in this paper, a firewall is configured using which nftables helps to improve existing problems in Linux based firewall which achieves optimal level to detect malicious activities.
In order to stop increasing malicious activities, packet filtering requires much better optimal solutions. Stateful firewall is the best solution to ensure such protection. The existence of errors, misconfiguration of firewall rules and code duplication is very likely to decrease the performance of firewall. In this paper, we proposed An Improved Approach of the Linux Firewall Using a Hybrid Frame of Netfilter for Linux web server. While there are a number of paths that can be followed to provide a best malware detection method for firewall security. This work will be beneficial for small enterprise in terms of money and time using Netfilter/nftables makes it easy and simple to configure the strong firewall to solve the security related problems & detect malware using strong firewall rules to achieve optimal level. In future this presented work can be extended to an advanced level by detecting others layers of protocol. At present it only works on packet header but in future work can be done on other fields of packet.
