Handling information about packet data connections in a security gateway element

A computer program product comprising program code means stored on a computer readable medium for performing when said program product is run on a computer, a process for handling information about packet data connections, which arrive at a security gateway element, in order to have in a connection data structure information about packet data connections in accordance with current screening information, said connection data structure comprising a number of entries representing a number of packet data connections, said process comprising routines of:

• storing data packet header information about packet data connections, which are in accordance with first screening information, in said connection data structure, and
• receiving updated screening information, said updated screening information forming either by itself or in connection with said first screening information second screening information,
• after receiving said updated screening information, comparing entries of said connection data structure to said second screening information, resulting in a classification of said entries as first entries, said first entries representing packet data connections in accordance with said second screening information, and as second entries, said second entries representing packet data connections in conflict with said second screening information.