| 摘要 |
<p>A network appliance for connection to a first network and a second network is disclosed. The appliance comprises at least one input coupled to the first network for receiving a data packet from the first network; at least one memory device storing instructions and data and at least one processor executing computer-executable instructions. The data packet includes an internet protocol (IP) address. The data includes a plurality of pages storing a plurality of excepted IP addresses. The excepted IP addresses each have a numeric value within a range and the range is divided into a plurality of contiguous sub-ranges. Each page includes one or more of the excepted IP addresses having numeric values within one or more of the sub-ranges associated with that page. Each page has a page size defined by the number of IP addresses assigned to that page, the IP addresses assigned to each page ordered by numeric value. The computer-executable instructions are to identify the IP address of the packet from the first network; identify a target page that will include the IP address if the IP address is one of the plurality of excepted IP addresses; search the target page to determine if the IP address is one of the excepted IP addresses in the target page; process the packet from the first network according to whether the IP address is an excepted IP address in the target page; determine whether to allow or deny the data packet from the first network to proceed to the second network based on the IP address not being an excepted IP address in the target page.</p> |
