Intermediary DNS Server Bypasses Firewalls for Legitimate Traffic

The patent introduces a mediator component that sits between the firewall and network traffic, analyzing data packets and making intelligent decisions about which traffic to allow through. This mediator uses machine learning models to distinguish legitimate communications from malware, thereby maintaining network security while preventing false positives that would block legitimate traffic.

The system dynamically changes parameters such as packet inspection depth, analysis thresholds, and firewall rules based on learned patterns from training data. By adjusting these parameters adaptively, the system optimizes the balance between security enforcement and legitimate traffic flow, reducing unnecessary blocks while maintaining security standards.

The firewall system is segmented into multiple specialized components: a packet capture module, a feature extraction module, a machine learning inference module, and an enforcement module. Each component handles a specific aspect of the inspection process, distributing complexity across modular units that can be independently configured and maintained, thereby reducing overall system complexity while maintaining thorough inspection capabilities.

The patent replaces manual firewall rule configuration and static inspection mechanisms with machine learning-based automated decision-making. The system learns patterns from training data and automatically adjusts inspection strategies, substituting complex manual configuration processes with adaptive algorithms that simplify ongoing management while improving detection accuracy.

The system performs preliminary authentication and classification of communications before they reach the firewall blocking stage. By pre-processing traffic through machine learning analysis that identifies legitimate patterns, the system prepares approval decisions in advance, allowing authenticated traffic to pass through quickly without undergoing repeated inspection, thereby maintaining security while improving transmission efficiency.

Once communications are authenticated and approved by the machine learning model, the system maintains continuous flow without repeated blocking and re-inspection cycles. The firewall rules are dynamically updated to allow approved traffic patterns to continue flowing smoothly, ensuring that legitimate communications experience minimal interruption and maintain high transmission efficiency while security monitoring continues in the background.