A message processing method and message processing device

Abstract

The application discloses a message processing method and message processing equipment, which are used to realize the autonomous learning of IP addresses by matching conditions, and are applicable to various scenarios where message features are static parameters and dynamic parameters. The method in the embodiment of the present invention includes: obtaining an IP message, and judging whether the obtained IP message is a domain name system DNS response message; if the IP message is a DNS response message, parsing the domain name requested by the user terminal from the IP message ; Judging whether the domain name requested by the user terminal exists in the matching condition of the control strategy, the matching condition includes the domain name that needs to be controlled according to the policy action of the control strategy; if the domain name requested by the user terminal exists in the matching condition, the IP packet If the IP address corresponding to the domain name requested by the user terminal is added to the matching condition, the matching condition also includes the added IP address.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a message processing method and message processing equipment. Background technique [0002] A firewall refers to a combination of a series of network elements set between different networks (such as a trusted intranet and an untrusted public network) or network security domains. It is the only entrance and exit of information between different networks or network security domains. It can control the information flow in and out of the network according to the security policy of the enterprise, such as controlling the information flow in and out of the network, and has strong anti-attack capabilities. Therefore, firewalls are usually used to provide information security services, implement network and information security infrastructure, and ensure the security of internal networks. [0003] An important function of the firewall is to process the data passing through the firewal...

AI Technical Summary

Problems solved by technology

[0006] However, when the IP addresses of the packets are discretely distributed, if multiple discrete IP addresses need to be set as matching conditions, the administrator needs to add multiple IP addresses to the matching conditions one by one. When the number of addresses is large, the configuration is very complicated, the workload is heavy, and it is not conducive to operation

In addition, when the characteristics of the packet are not static fixed parameters, but parameters that may change, such as in the application scenario that needs to be managed based on IP address, and the IP address may change, because the matching conditions cannot be collected in advance All the required IP addresses cannot be accurately set as matching conditions, so there must be IP addresses that are not set as matching conditions but need to control the priority of packets in real scenarios. This will lead to message control failure

Therefore, the existing packet control strategy can only be applied to application scenarios where static fixed parameters are set in advance as matching conditions, and packet control cannot be performed for situations where packet characteristics cannot be known in advance, and the versatility is not strong

Images