Method of guarding network attack

Abstract

This invention relates to a method for preventing network from attack includes firstly, setting network address and interface information correspondent relationship list in network equipment, namely,network addresses of other network equipment connected with the said network equipment interface and applied interface information correspondent relation list of other network equipment connected on the said network; the route transferred list can be used in a router then the network equipment looks for the said correspondent relationship list according to the original address of the received message and makes judgment in terms of the result it is fake to determine the addressability of the message.

Description

technical field

[0001] The invention relates to a network access control technology, in particular to a method for preventing network attacks. Background technique

[0002] At present, there are two ways to implement network access control: one network access control method defines a series of access control rules, the access control rules include control rules based on network addresses, etc., and the rules specify which packets can pass , which messages are not allowed to pass, so that when the message enters the router, it will match these rules, the message that does not meet the rules will be discarded, and the message that meets the rules can continue to be transmitted; the other is based on The access control method of traffic statistics, which can count traffic according to certain characteristics of packets. If the traffic of packets with corresponding characteristics exceeds the specified value, the router can limit the traffic of this type of packets, or refuse to...

Images