Apparatus for filtering server responses

US8087082B2 · kind B2 · utility

Assignee

• Ironport Systems, Inc. · US

Inventors

• Eric Bloch · Berkeley, US
• Shalabh Mohan · Mountain View, US
• Rajendraprasad R. Pagaku · Foster City, US
• Doug Moore · Sullivan, US
• Mark Krentel · Houston, US
• Bruce Thompson · South San Francisco, US
• Julian R. Elischer · Corona, US
• Brandon L. Golm · San Francisco, US

Key dates

• Filing date: Dec 3, 2010
• Grant date: Dec 27, 2011
• Expiry date: Dec 3, 2030

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L43/16
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A data processing apparatus, comprising at least one processor and a traffic monitor comprising logic which, when executed by the processor, causes the processor to perform: creating, using forward Domain Name System (DNS) lookups, a mapping of domain names to Internet Protocol (IP) addresses; determining whether a particular domain in the mapping requires handling data traffic to or from the particular domain by performing a particular action; based on the mapping, determining one or more IP addresses that are associated with the particular domain; generating policy for a firewall that instructs the firewall to perform the particular action upon receiving a particular request; wherein the particular request specifies a particular IP address that is within the particular domain.