Dynamically switching on/off TNS protocol communication port in firewall packet filtering

Abstract

The invention discloses a method of fire wall packet filtration dynamic switch TNS protocol communication ports comprising the steps of, taking a data packet from the buffer zone queue of the fire wall data receiving packet, performing state packet filtration to the data packet, performing dynamic TNS state detecting with respect to TNS protocol to the admission data packet after filtration, and the fire wall transferring the data packet.

Description

technical field [0001] The invention relates to the technical field of firewall dynamic packet filtering, in particular to a method for dynamically switching communication ports by firewall packet filtering. Background technique [0002] A firewall is a barrier between the protected network and the external network to prevent unpredictable and potentially destructive intrusions. According to different working mechanisms, firewalls are divided into two types: packet filtering firewalls and application-level agents. Packet filtering firewall is divided into static packet filtering and dynamic packet filtering. [0003] The static packet filtering firewall examines each data packet according to the defined filtering rules to determine whether it matches a certain packet filtering rule. Packet filtering rules are formulated based on the header information of the data packet, which includes IP source address, IP destination address, transmission protocol (TCP, UDP, ICMP, etc.),...

AI Technical Summary

Problems solved by technology

However, the traditional firewall packet filtering technology cannot dynamically open and close the port dynamically negotiated by the TNS protocol; therefore, if normal communication between the client and server of the Oracle database based on the TNS protocol is to be allowed, it has to be opened Transmission Control Protocol (TCP) high port above 1024

But in this way, it will have a great impact on the security of the firewall.

Images