Abstract: As a traditional information security technology (IST), distributed firewall is playing an important role while some problems exist within. Conflicts always appear in distributed firewall policy which brings out the security menace. After discussions of some relations between the rules of firewall, this paper demonstrates the probable mistakes which might exist in policy configuration, and also introduced an algorithm of mistake-detecting about policy configuration. Finally, the direction of further researching is also presented.

Key words: Firewall Distribute Policy Rule Conflict Algorithm