摘要： 针对当前网络安全领域的新发展，描述了一个新型防火墙的设计和实现，重点介绍了该防火墙的主要体系结构，和各个功能子模块，如有状态和无状态的统一过滤模块、NAT 转换等。这里突出对一些新技术如IPSEC的支持。

关键词: 安全服务器网络, 包过滤, 代理, 虚拟专用网, 网络地址转换, 防火墙, IPSec

Abstract: This paper designs and implements a new kind of firewall which bases on the development of network security. The framework and the modules are introduced at the same time such as stateless filter, stateful filter, NAT etc. The support of many new security fields such as IPSec is discussed especially.

中图分类号: 

• TP393.08