摘要 |
PROBLEM TO BE SOLVED: To provide a high multiple user housing firewall device corresponding to high speed retrieval, capable of realizing the high speed retrieval of a filtering rule having the same value as a filtering ID applied to a packet. SOLUTION: In the high multiple user housing firewall device corresponding to high speed retrieval, the rule itself and address information showing a position where a filtering rule to be retrieved next is stored, are described in each filtering rule configuring each filtering policy of a filtering table, and rule retrieval is executed to the filtering rule on the basis of a filtering ID applied to a packet. When the rule is matched with a rule condition, the rule retrieval is ended, and the packet applied with the filtering ID is made to pass or abandoned according to an operation mentioned in the rule, and when the rule is not matched with the rule condition, the rule retrieval is executed to the filtering rule stored at the position shown by the address information. COPYRIGHT: (C)2005,JPO&NCIPI
|