Increasing Firewall Reliability by Recording Routes

摘要

This paper describes an implementation of an experimental firewall. This firewall differs from conventional firewalls since it takes the route a request has followed through the network into account to decide whether packets should be allowed through or not. This enables an organisation to reduce the possibility of spoofing and, in some cases, avoid the use of untrusted network routes by external clients. The code fo the firewall is included.