Packet filtering method, system and device

A message filtering and message technology, which is applied in the field of communication, can solve the problem that network equipment cannot realize the URPF function, and achieve the effect of reducing requirements and preventing network attacks

Inactive Publication Date: 2008-03-19
ZTE CORP
View PDF0 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Many network devices use ASIC chips to implement data forwarding. At present, most ASIC chips do not support the URPF function, which makes these network devices unable to implement the URPF function.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Packet filtering method, system and device
  • Packet filtering method, system and device
  • Packet filtering method, system and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0027] The technical solution of the present invention will be described below with reference to the accompanying drawings.

[0028] Referring to Fig. 1, the message filtering method according to the present invention is illustrated. The method includes the following steps: S102, enable the unicast reverse lookup path function on one or more interfaces of the network device, and bind the first access control list on one or more interfaces, to prevent all The IP message is passed; S104, adding device routing information to the forwarding table corresponding to one or more interfaces with the unicast reverse lookup path function, wherein the device routing information includes source IP address, mask, and outgoing interface information; S106, Bind a second access control list on one or more interfaces of the network device, where the priority of the second access control list is higher than that of the first access control list, and the second access control list only allows sou...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a message filtering method, system and device. The method includes the following steps: S102, starting a uni-cast reverse-direction look-up path function on one or more interfaces of a network device and bonding a first access control list on the one or more interfaces to prevent IP messages of all desired routes to pass through; S104, adding device route information in forwarding table corresponding to the one or more interfaces of the uni-cast reverse-direction look-up path function by the network device, wherein the device route information including source IP address, mask and outlet interface information; and S106, bonding a second access control list at one or more interfaces of the network device, wherein the priority of the second access control list is higher than the first access control list; and the second access control list only allows the message having a source IP address matching that of the device route information to pass through.

Description

technical field [0001] The present invention relates to the field of communication, and more particularly relates to a message filtering method, system and device. Background technique [0002] URPF is the abbreviation of Unicast Reverse Path Forwarding. URPF obtains the source address and incoming interface of the packet, takes the source address as the destination address, and searches the route in the forwarding table. In loose mode, as long as the route is found, it will pass; in strict mode, the interface corresponding to the source address found in the forwarding table must match the incoming interface before passing. Otherwise, it considers that the source address is spoofed and discards the packet. Many network devices use ASIC chips to implement data forwarding. At present, most ASIC chips do not support the URPF function, which makes these network devices unable to implement the URPF function. The main function of URPF is to prevent network attacks based on sour...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityApplications(China)
IPC IPC(8): H04L12/56H04L29/06H04L45/74
Inventor陈遗保
OwnerZTE CORP