Fire wall/subnet penetration method based on intranet node forwarding technology

Abstract

The invention discloses a firewall / subnet penetration method based on intranet node forwarding technology, which includes three modules: Proxy (agent) module, Client (user) module, and Server (server) module. The Proxy module is mainly responsible for collecting user requests and forwarding them to the Client module; the Client module is mainly responsible for establishing a connection with the Server module and forwarding requests from the Proxy module; the Server module is mainly responsible for actively establishing a connection with the Client module, and the processing is performed by The request forwarded by the Client module obtains the corresponding resource and forwards it. The present invention utilizes existing protocols and platforms to effectively reduce the cost of firewall / subnet penetration and can achieve relatively safe service and data transmission.

Description

1. Technical field [0001] The invention relates to a method for penetrating a firewall / subnet. Specifically, an internal network node is used as a data forwarding server to forward requests from the external network and required data, thereby realizing the penetration of the firewall / subnet. 2. Technical background [0002] For the sake of network security and making full use of limited Internet address resources, many companies and organizations need to form subnets of their internal networks and isolate them from external networks, such as the Internet, to monitor the network access between internal networks and external networks. Control, the firewall can effectively achieve this function. At the same time, trusted users on the external network cannot access resources on the internal network unless special measures are taken. In many cases, it is necessary to provide resources of the internal network to trusted users of the external network and allow them to access resou...

AI Technical Summary

Problems solved by technology

However, NAT technology itself also has its shortcomings, such as increasing the possibility of wrong addressing; making some applications impossible to implement, at least making it more difficult to run these applications; it hides the information of the host, so that the host cannot Recognized; Compatibility issues with SNMP (Simple Network Management Protocol), DNS (Domain Name System) and many other technologies, etc.

Images