Method and router to permit or block internet protocol (ip) connectivity based on originating domain name server (dns) requests
AssigneeDNSthingy Inc.
InventorsDavid Redekop, Tomas Trebicky
Life of this patent
Estimating the term…
Abstract
A router and method for validating Domain Name Service (DNS) queries which can include sending them upstream. Internet Protocol Enforcement (IPE) is included into the router to allow passage of Transmission Communication Protocol (TCP) and User Datagram Protocol (UDP) traffic through a compatible gateway only when the destination IP address was the result of a prior validated DNS query still in its TTL (time to live) period. IP packets that did not originate with a DNS query can be blocked by default, for example.
Claims27
A method performed by a router which provides connectivity between a local network and a backhaul network, wherein the local network includes a requestor device, the method comprising:
- receiving, from the requestor device, a Domain Name Service (DNS) request including a domain name query;
- validating the DNS request;
- sending a resolved address based from said validating of the DNS request;
- receiving traffic which identifies an address;
- and
- permitting passage of the traffic in dependence of verifying that the address is any one of the resolved addresses.
A method performed by a router which provides connectivity between a local network and a backhaul network, wherein the local network includes a requestor device, the method comprising:
- receiving, from the requestor device, a Domain Name Service (DNS) request including a domain name query;
- validating the DNS request;
- sending a resolved address based from said validating of the DNS request;
- receiving traffic which identifies an address;
- and
- permitting passage of the traffic in dependence of verifying that the address identifies the requestor device.
Dependencies are inferred from the claim text.