Research On Distributed Firewall Technology On The Basis Of Network Driver Interface Specification

With the development of network security, firewall emerged. Traditional firewall is a bracer between inner network and outer network, but it could not control inner network accessing. We need a set of means to resolve the problem immediately. Distributed firewall which bases on structure of C/S caters for this requirement. It consists of strategy server and client firewall. Its core is inducting distributed technology into traditional firewall for making up defaults of traditional firewall and protecting both inner network and outer network.This paper designed a distributed firewall system based on Network Driver Interface Specification. It comprised of strategy server subsystem, client firewall subsystem and network firewall subsystem. Middleware technology accomplished communication among subsystem. Capture of datagram in middleware is completed by Network Driver Interface Specification. And it used Windows Network Driver Interface Specification to solve problem of missing datagram.This system emphasized on distributed strategy issuance. It completed filtration of IP datagram, TCP datagram and UDP datagram in client firewall and avoided attack from inner network. In network firewall, we use NAT technology, shielding inner network top configuration and improving security of inner network.