This paper introduces a kind of application-level firewall which is self-designed and also has already realized its primitives.It can effectively detect attacks against WWW service and E-mail and desert them. This reflects its specialty. On the other hand, the addition of configuration module contribute to the general-purpose property of the firewall, which further makes the firewall convenient to apply it to other applications.