作为一种传统的信息安全技术，分布式防火墙发挥着非常重要的作用，同时，它也存在着一些问题。分布式防火墙策略经常会存在冲突，给企业带来了安全隐患。在讨论了防火墙规则的几种关系之后，给出了可能存在的策略配置错误，并给出了检测策略配置错误的算法,算法的仿真实验证明了算法的有效性和执行效率。最后，给出了需要进一步研究的方向。

As a traditional information security technology (IST), distributed firewall is playing an important role while some problems exist within. Conflicts always appear in distributed firewall policy which brings out the security menace. After discussions of some relations between the rules of firewall, this paper demonstrates the probable mistakes which might exist in policy configuration, and also introduced an algorithm of mistake-detecting about policy configuration. Finally, the direction of further researching is also presented.