Method for eliminating source-based routing by a device disposed between an IP-compliant network and private network elements

Abstract

Methods and apparatus for eliminating source-based routing are disclosed. Disclosed embodiments include a gateway device being disposed between an IP-compliant network and private network elements for receiving incoming access request packets from users desiring to access private network elements residing behind the device. The device may include proxy agents configured to discard any received access request packets that contain a source address corresponding to any of the private network elements residing behind the device.

1 . A method for eliminating source-based routing by a device disposed between an IP-compliant network and private network elements comprising: 
 receiving incoming access request packets from the IP-compliant network to access private network elements residing behind the device; and    intercepting and discarding the received access request packets that contain a source address corresponding to any of the private network elements residing behind said device.    
   
   
       2 . The method of  claim 1 , wherein said act of intercepting and discarding received packets further comprises comparing said source address of said received request packets against a list of address corresponding to said network elements residing behind said device.  
   
   
       3 . The method of  claim 2 , wherein said device comprises a firewall.  
   
   
       4 . The method of  claim 2 , wherein said device comprises a router.  
   
   
       5 . The method of  claim 2 , wherein said act of intercepting and discarding received packets is performed by a proxy agent operable on said firewall.  
   
   
       6 . The method of  claim 5 , further comprising the act of maintaining a transaction log containing information regarding said incoming access request packets.  
   
   
       7 . An apparatus for eliminating source-based routing by a device disposed between an IP-compliant network and private network elements comprising: 
 means for receiving incoming access request packets from the IP-compliant network, said received access request packets desiring to access private network elements residing behind the device; and    means for intercepting and discarding the received access request packets that contain a source address corresponding to any of the private network elements residing behind said device.    
   
   
       8 . The apparatus of  claim 7 , further comprising means for comparing said source address of said received request packets against a list of address corresponding to said network elements residing behind said device.  
   
   
       9 . The apparatus of  claim 8 , wherein said apparatus comprises a firewall.  
   
   
       10 . The apparatus of  claim 8 , wherein said apparatus comprises a router.  
   
   
       11 . The apparatus of  claim 8 , further comprising means for maintaining a transaction log containing information regarding said incoming access request packets.  
   
   
       12 . A network device for eliminating source-based routing, said device being disposed between an IP-compliant network and private network elements and comprising: 
 at least one proxy agent configured to receive incoming access request packets from the IP-compliant network, said received access request packets desiring to access private network elements residing behind the device; and    the at least one proxy agent being further configured to discard any received access request packets that contain a source address corresponding to any of the private network elements residing behind said device.    
   
   
       13 . The device of  claim 12 , wherein said device is further configured to compare said source address of said received request packets against a list of address corresponding to said network elements residing behind said device.  
   
   
       14 . The device of  claim 12 , wherein said device comprises a firewall.  
   
   
       15 . The device of  claim 12 , wherein said device comprises a router.  
   
   
       16 . The method of  claim 13 , wherein said device is further configured to maintain a transaction log containing information regarding said incoming access request packets.  
   
   
       17 . A computer readable device including instructions for executing a method for eliminating source-based routing by a device disposed between an IP-compliant network and private network elements, the method comprising: 
 receiving incoming access request packets from the IP-compliant network to access private network elements residing behind the device; and    intercepting and discarding the received access request packets that contain a source address corresponding to any of the private network elements residing behind said device.    
   
   
       18 . The device of  claim 17 , wherein said act of intercepting and discarding received packets further comprises comparing said source address of said received request packets against a list of address corresponding to said network elements residing behind said device.  
   
   
       19 . The device of  claim 18 , wherein said act of intercepting and discarding received packets is performed by a proxy agent operable in a firewall.  
   
   
       20 . The device of  claim 18 , further comprising the act of maintaining a transaction log containing information regarding said incoming access request packets.