一种增加防火墙可靠性的方法──记录路由法

An Approach to Increase Firewall's Reliability-Record Routes

介绍了一种实验性的防火墙系统，与传统设计不同之处是其基于ＰＣＭ模型，可以将每次网络服务请求的ＩＰ数据包的路由作为包过滤的根据。这有助于减少防火墙被欺骗的可能性，并在一定程度上避免了外部客户机使用不可信的路由。

This paper discusses an experimental firewall's architecture and implementation. It is based on the PCM security model and filter the packets according to the IP packets'route. Its advantage is to reduce the possibility of spoofing and using of untrusted network routes.