针对局域网内主机用户的安全问题 ,对边界防火墙的不足之处进行了分析与研究 ,对主机防火墙采用的技术及存在的问题进行了探讨与研究 ,并给出了一种新型主机防火墙的设计方案 ,包括实现平台的选择、包过滤模块、IP层安全机制、入侵检测等模块 ,提高了局域网内部的网络安全性。 According to the security problems of the host users in the LAN, the author analyzes and studies the shortcomings of the border firewall, discusses the technologies and problems existing in the host firewall, and presents a new design scheme of the host firewall , Including the realization platform selection, packet filtering module, IP layer security mechanism, intrusion detection and other modules to improve the network security within the LAN.