Abstract: In view of the deficiencies of distributed firewall and Intrusion detection, a distributed firewall based on Intrusion detection is proposed.It improves the architecture of distributed firewall by adding intrusion detection module in order to get a dynamic distributed firewall.It reduces the amount of intrusion detection data by modification the structure of packets when they arrive at the intrusion detection module from the host firewall filtering module.The results of data detection return to management center rapidly, so the management center can update rule dynamically and timely.The experimental results show that the proposed scheme solves some problems of traditional distributed firewall, including the policy updating delay, unauthorized users can intercept the internal communication and intrusion can not be found timely etc.Meanwhile, it also solves some problems of intrusion detection module such as the large amount of data, the inability of blocking the attack and so on.