Abstract: After researching the theory of firewall of Netfilter and Iptables, and analyzing the key factors which influence performance of firewall, this paper puts forward the concept of firewall optimization and the principles of how to write firewall rules. The template of rules is presented based on these principles. Finally, the optimization effect is discussed.


Key words: firewall, Iptables, optimization