Packet filtering method for firewall

Abstract

The invention discloses a packet filtering method and a packet filtering system for a firewall. The method comprises the steps of obtaining a characteristic attribute set by a user, wherein the characteristic attribute comprises the type of service to be blocked and user information action; performing characteristic capture to a packet by using a characteristic framework library tool to form a characteristic library; importing the type of service to be blocked, the user information action and the characteristic library into the firewall; matching the attribute characteristic of the packet passing through the firewall with the characteristic library, and matching the attribute of the packet with the type of service to be blocked and the user information action; filtering the packet according to matching results. The packet filtering method and the packet filtering system for the firewall have the advantages that since a DPI (Deep Packet Inspection) scanning integrated system is used and the control and filtering of web-type emails can be completed on one firewall, the network security is improved and the networking cost is reduced.

Description

technical field [0001] The invention relates to the field of network security, in particular to a message filtering method and system of a firewall. Background technique [0002] With the diversity of network applications, various network security emerges as the times require, and the demand for effective mechanisms to defend against network intrusions is becoming more and more urgent. With the rapid development of firewall technology, it has become one of the most important guarantees for Internet security. Current network firewalls implement security prevention and control based on routing-based three-tier services. For example, current firewalls cannot independently and specifically manage emails in the form of web pages. The email control and filtering mechanism implemented by the existing firewall mainly includes the following two types: [0003] The first is to use a third-party server for web mail cleaning. When users want to use a firewall for comprehensive mail co...

AI Technical Summary

Problems solved by technology

[0005] It is obvious from the above two mechanisms that if you do not want to use a third-party server device but only want to use a firewall, you must block all HTTP packets on the network. In blocking mode, obviously other HTTP services are also prohibited, thus affecting the normal use of network resources by users

On the other hand, if you use third-party equipment, it will inevitably greatly increase the cost of networking

[0006] For the above-mentioned problems existing in related technologies, effective solutions have not yet been proposed

Images