Analyzing IP packet classification and according to characteristics in firewall rule and network data flow, we put forward to improving way of finding in the Linux firewall rule.

• 分析了常见的IP分类算法，并根据防火墙规则的特点和网络数据流的特性，提出了Linux防火墙规则查找的改进算法。