Patent ID: 7634805
Filing Date: 2009-12-15
Classification: H04L

Abstract:
1. A computer-implemented method comprising computer-executable instructions, the method comprising: receiving, at a firewall on a device, a data packet from a first host bound for a second host, the data packet identifying a source address as a first host address and a destination address as a second host address, wherein the firewall on the device is remote from the first host and the second host; re-directing the data packet to a first internal location in the firewall on the device by modifying the destination address to an address of the first internal location while retaining an association with the first host address, wherein the first internal location comprises a first firewall socket; statefully inspecting the data packet while retaining the association with the first host address; allocating a second internal location in the firewall on the device for transmitting the data packet to the second host, wherein the allocating includes modifying the source address of the data packet to be an address of the second internal location while retaining the association with the first host address, wherein the second internal location further comprises a second firewall socket; directing the data packet to the second internal location; modifying the source address of the data packet to be the first host address; and transmitting the data packet to the second host.