FIRE WALL FRAMEWORK, A COMMUNICATING METHOD AND A COMPUTER READABLE MEDIUM, PARTICULARLY CONCERNED WITH A FIRE WALL STRUCTURE REALIZED IN MORE THAN ONE NETWORK DEVICE

摘要

PURPOSE: A fire wall framework, a communicating method and a computer readable medium are provided to comprise a layer processor retaining a packet context, which receives the packet context from a previous layer processor and transmits the packet context to the first fire wall engine, and a lookup component located within the first fire wall engine, which identifies more than one matching filter by using the packet context and layer parameters. CONSTITUTION: A fire wall structure includes a user mode process(250) and a kernel mode process(252). The user mode process(250) and the kernel mode process(252) are executed as portions of an operating system in a network device. The kernel mode process(252) includes the first fire wall engine called a kernel fire wall engine(256) and selective callouts(258). The kernel mode process(252) identifies matching filters of network packets, processes the packets, and executes other actions in the packets to realize a set fire wall policy.