Patent ID: 8955128
Filing Date: 2015-02-10
Classification: H04L

Abstract:
1. A system for selectively regulating traffic into and out of a network in real time without compromising the speed of the traffic by protecting the network from unwanted traffic, using IP header information contained in the traffic, the system comprising: a computer for providing an interface to a user; a server in operable communication with the computer for storing network information associated with the network traffic, wherein the server comprises a repository for updates, pre-compiled lists of IP header information correlated to specific countries, regions and on-line entities, and content information from the user; and an appliance comprising programmable hardware or virtual hardware, in operable communication with the server, for evaluating and regulating incoming packets to the network and outgoing packets from the network consistently with the network information; the appliance further comprising at least one processor for executing a rules engine, the rules engine applying a plurality of user-configured decision chains to the packets in a predetermined order, the user-configured decision chains including at least three of a trusted chain, a honeypot-drop chain, a custom chain, a trigger chain, a list chain and an out-list chain; wherein the trusted chain allows traffic to pass if it is from a previously established network connection or is from a trusted physical network port; the rules engine further configured to execute the included decision chains in the following order: trusted chain, honeypot-drop chain, custom chain, trigger chain, list chain and out-list chain, until a packet is either routed or dropped based on one of the included decision chains, whereby the flow of incoming and outgoing packets is controlled according to a set of rules defined by the user, the appliance further comprising a script generator for organizing and compiling files, a database for storing logs, user configurations and cached data, whereby the number of chains applied to the packets is minimized.