Illegal external connection detection method for NAT access equipment

Abstract

The invention provides an illegal external connection detection method for NAT access equipment, which comprises the following steps of: S1, deploying gateway hardware equipment on a bypass of a core switch, and providing network flow information to the gateway hardware equipment; S2, analyzing flow information in real time; S3, if the chkurl information does not exist, turning to the step S4, otherwise, turning to the step S5; S4, enabling the gateway hardware equipment to use a Set-Cookie value to enter a chkurl key and a chkurl key value; S5, judging whether the chkurl key value is consistent with the request path of the current message or not, if not, turning to step S6, and otherwise, turning to S7; S6, judging whether the time information in the chkurl key value is overtime or not, and if the time information is overtime, turning to the step S4; S7, judging whether the time information in the chkurl key value exceeds a detection period or not, if not, ending, otherwise, continuing to execute the step S8; and S8, inputting the gateway hardware equipment value into a script with an alarm system connection request so as to detect the external connection condition of the equipment, thereby solving the problem that the NAT access equipment cannot effectively and comprehensively carry out illegal external connection detection.

Description

【Technical field】 [0001] The invention relates to the technical field of network security detection, in particular to a detection method for illegal outreach of NAT access equipment. 【Background technique】 [0002] NAT (Network Address Translation), that is, network address translation technology, is widely used as a temporary solution to the current depletion of IPv4 address resources, ranging from operators to home networks. The use of NAT greatly reduces the threshold of network access and makes the network topology more complex, greatly increasing the difficulty of operation and maintenance management. In particular, there are special needs that require isolation and protection of networks that prohibit illegal outreach, and it is even impossible to effectively manage private network devices accessed by NAT. In order to solve the above problems, it is necessary to propose an outreach detection method for NAT access devices, which is used to detect the network connection...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to overcome the deficiencies of the above-mentioned prior art, and to provide a method for detecting illegal outreach of NAT access devices, which aims to solve the problem that the existing technologies cannot effectively discover and detect devices and devices that access the network through NAT. Problems with the communication status of other networks such as the Internet

Images