This paper briefly describes what is IP packet filtering, then identifies and examines problems common to current packet filtering implementations. Finally, a new implementation is also presented.

• 简述IP包过滤技术，重点分析了当前包过滤实现方案中的缺陷，在此基础上提出了一种新的安全可行的包过滤实现方案。