NAT method and method for realizing access control list

Abstract

The invention discloses a control list conversing and accessing method of network address, which comprises the following steps: A. judging whether network address is conversed into network address conversion information through the user data pack; executing the step C if the judging result is to converse; executing the step B if the result is not to converse; B. generating the user data pack to converse the network address into the network address conversion information; recording the journal; C. conversing the network address of the user data pack according to the network address conversion information corresponding to the user data pack. The invention is convenient for user to access the historical information, on-line and off-line time, which is accurate to judge the attack source and attack time when the network is attached and off-line.

Description

technical field [0001] The invention relates to network security technology, in particular to a network address conversion method and a method for realizing an access control list. Background technique [0002] Nowadays, with the rapid development of computer and communication technology and the expansion of network openness, interconnection and sharing, enterprises rely more and more on information and network technology to support their rapid growth and expansion in the global market. But there are also more and more threats, such as hacker attacks, malicious codes, and worms. For this reason, many enterprises have gradually deployed security products such as firewalls and anti-viruses according to the needs of core database and system operations, and equipped with corresponding security policies and network security management equipment. [0003] Network Address Transform (NAT) means that within a network, IP addresses can be freely customized according to needs without ...

AI Technical Summary

Problems solved by technology

[0008] First of all, you can only view the entries currently in use, but cannot know the historical information of NAT and ACL conversion, nor can you know the user's log-off and log-out time;

[0009] Secondly, the fast cache only stores the entries that are currently in use, and deletes them after use. When the network is attacked and the user is offline, it is impossible to accurately determine the source of the attack and the duration of the attack.

Images