Abstract: Based on the discussion of state-of-art of firewall and its problem, discretionary access control model and mandatory access control model are designed. In order to prevent information leakage and denial of service, a multi-level reference model for firewall is proposed. The firewall reference model are analysed. The Implementation of the firewall based on the reference model is promoted in the end.