Message processing method and message processing equipment

Abstract

The application discloses a message processing method and message processing equipment, which are used for realizing autonomic learning of IP (Internet Protocol) addresses by a matching condition and are suitable for a plurality of scenes taking message features as a static parameter and a dynamic parameter. According to the embodiment of the invention, the method comprises the following steps: acquiring an IP message, and judging whether or not the acquired IP message is a domain name system (DNS) response message; if the IP message is the DNS response message, resolving a domain name requested by a user terminal from the IP message; judging whether or not the domain name requested by the user terminal exists in the matching condition of a control strategy, wherein the matching condition comprises a domain name needing to perform message control according to the strategy action of the control strategy; and if the domain name requested by the user terminal exists in the matching condition, adding an IP address corresponding to the domain name requested by the user terminal in the IP message into the matching condition in order that the matching condition further comprises the added IP address.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a message processing method and message processing equipment. Background technique [0002] A firewall refers to a combination of a series of network elements set between different networks (such as a trusted intranet and an untrusted public network) or network security domains. It is the only entrance and exit of information between different networks or network security domains. It can control the information flow in and out of the network according to the security policy of the enterprise, such as controlling the information flow in and out of the network, and has strong anti-attack capabilities. Therefore, firewalls are usually used to provide information security services, implement network and information security infrastructure, and ensure the security of internal networks. [0003] An important function of the firewall is to process the data passing through the firewal...

AI Technical Summary

Problems solved by technology

[0006] However, when the IP addresses of the packets are discretely distributed, if multiple discrete IP addresses need to be set as matching conditions, the administrator needs to add multiple IP addresses to the matching conditions one by one. When the number of addresses is large, the configuration is very complicated, the workload is heavy, and it is not conducive to operation

In addition, when the characteristics of the packet are not static fixed parameters, but parameters that may change, such as in the application scenario that needs to be managed based on IP address, and the IP address may change, beca...

Images