摘要 |
<p><P>PROBLEM TO BE SOLVED: To provide a packet filtering system which can minimize the depression of a packet transfer capability even when a plurality of filtering rules are configured. <P>SOLUTION: A packet filtering system 1 includes a plurality of series-connected packet filtering apparatus 10, wherein each packet filtering apparatus 10 inputs packets, analyzes the input packets, determines whether to evaluate permission or denial of passing packets by the own apparatus or not, outputs the packets when not evaluating the permission or denial by the own apparatus, or evaluates whether to pass or discard the packets when evaluating the permission or denial by the own apparatus, outputs the packets if determined to pass the packets. Thus, any packet filtering apparatus 10 out of the plurality of packet filtering apparatuses 10 determines the permission or denial of passage for the packets inputted from the network. <P>COPYRIGHT: (C)2011,JPO&INPIT</p> |