Network location based processing of data communication connection requests

• US 8,416,754 B2
• Filed: 02/09/2012
• Issued: 04/09/2013
• Est. Priority Date: 05/05/2005
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Venkatsubra, Venkat, Youngman, Richard P.
• Primary Examiner(s): RENNER, BRANDON M
• Application Number:
  US13/370,015
• Publication Number:
  US 20120144036A1
• Time in Patent Office: 425 Days
• Field of Search: 370/331, 370/338, 370389-392
• US Class Current: 370/338
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/162 involving adaptations of sockets based mechanisms secure socket layer H04L63/168

Abstract

Responsive to receiving a request for a data communications connection, a data communications module of a receiver determines whether a sender of the request is local or remote with respect to the receiver. The data communications module also determines whether a location response flag indicates local or remote. If the relative location of the sender with respect to the receiver corresponds with the location response flag, then the data communications connection is allowed. Otherwise, the connection is not allowed.

Claims

1. A method comprising:

receiving a request to establish a data communication connection, wherein the request indicates a network address of a sender;

determining whether the sender is local or remote with respect to a receiver of the request based, at least in part, on the network address of the sender and a network address of the receiver, wherein the sender is local with respect to the receiver if the network address of the receiver and the network address of the sender identify a same network, and the sender is remote with respect to the receiver if the network address of the receiver and the network address of the sender identify different networks;

determining whether a location response flag indicates remote or local;

allowing the data communication connection to be established between the sender and the receiver if the location response flag indicates local and the sender was determined to be local with respect to the receiver;

allowing the data communication connection to be established between the sender and the receiver if the location response flag indicates remote and the sender was determined to be remote with respect to the receiver;

preventing the data communication connection from being established between the sender and the receiver if the location response flag indicates remote and the sender was determined to be local with respect to the receiver; and

preventing the data communication connection from being established between the sender and the receiver if the location response flag indicates local and the sender was determined to be remote with respect to the receiver.

2. The method of claim 1 further comprising:

determining whether a state of a port of the receiver is open or closed, wherein the request indicates the port;

wherein said allowing the data communication connection to be established between the sender and the receiver depends upon the state of the port being open;

wherein said preventing the data communication connection from being established between the sender and the receiver comprises dropping the request if the state of the port is closed and denying the request if the state of the port is open.

3. The method of claim 2, wherein said denying the request comprises sending a reset message to the sender.

4. The method of claim 2 further comprising:

denying the request if the state of the port is closed, and if the location response flag indicates local and the sender was determined to be local with respect to the receiver; and

denying the request if the state of the port is closed, and if the location response flag indicates remote and the sender was determined to be remote with respect to the receiver.

5. The method of claim 1, wherein said determining whether the sender is local or remote with respect to the receiver of the request based, at least in part, on the network address of the sender and a network address of the receiver comprises performing a logical AND operation on the network address of the sender and a network address mask of the receiver.

6. The method of claim 1, wherein the network address of the sender and the network address of the receiver comprise Internet Protocol addresses.

7. The method of claim 1, wherein the request comprises a synchronize message.

8. A computer program product for processing data communication connection requests, wherein the computer program product comprises:

a non-transitory machine-readable storage medium encoded with computer usable program code, the computer usable program code comprising computer usable program code configured to;

determine whether a sender of a request for a data communication connection is local or remote with respect to a receiver of the request based, at least in part, on a network address of the sender and a network address of the receiver, wherein the request indicates the network address of the sender, wherein the sender is local with respect to the receiver if the network address of the receiver and the network address of the sender identify a same network, and the sender is remote with respect to the receiver if the network address of the receiver and the network address of the sender identify different networks;

determine whether a location response flag indicates remote or local;

allow the data communication connection to be established between the sender and the receiver if the location response flag indicates local and the sender is determined to be local with respect to the receiver;

allow the data communication connection to be established between the sender and the receiver if the location response flag indicates remote and the sender is determined to be remote with respect to the receiver;

prevent the data communication connection from being established between the sender and the receiver if the location response flag indicates remote and the sender is determined to be local with respect to the receiver; and

prevent the data communication connection from being established between the sender and the receiver if the location response flag indicates local and the sender is determined to be remote with respect to the receiver.

9. The computer program product of claim 8, wherein the computer usable program code is further configured to:

determine whether a state of a port of the receiver is open or closed, wherein the request indicates the port;

wherein the computer usable program code is configured to allow the data communication connection to be established between the sender and the receiver in dependence upon the state of the port being open;

wherein the computer usable program code being configured to prevent the data communication connection from being established between the sender and the receiver comprises the computer usable program code being configured to drop the request if the state of the port is closed and to deny the request if the state of the port is open.

10. The computer program product of claim 9, wherein the computer usable program code configured to deny the request comprises the computer usable program code configured to send a reset message to the sender.

11. The computer program product of claim 9, wherein the computer usable program code is further configured to:

deny the request if the state of the port is closed, and if the location response flag indicates local and the sender was determined to be local with respect to the receiver; and

deny the request if the state of the port is closed, and if the location response flag indicates remote and the sender was determined to be remote with respect to the receiver.

12. The computer program product of claim 8, wherein the computer usable program code configured to determine whether the sender is local or remote with respect to the receiver of the request based, at least in part, on the network address of the sender and the network address of the receiver comprises the computer usable program code configured to perform a logical AND operation on the network address of the sender and a network address mask of the receiver.

13. The computer program product of claim 8, wherein the network address of the sender and the network address of the receiver comprise Internet Protocol addresses.

14. The computer program product of claim 8, wherein the request comprises a synchronize message.

15. An apparatus comprising:

a processor;

a communication adapter operable to receive a request for a data communications connection;

a system bus coupled with the processor and the communications adapter; and

a data communications module, the data communications module operable to,

determine whether a sender of the request is local or remote with respect to the apparatus based, at least in part, on a network address of the sender and a network address of the apparatus, wherein the request indicates the network address of the sender, wherein the sender is local with respect to the receiver if the network address of the receiver and the network address of the sender identify a same network, and the sender is remote with respect to the receiver if the network address of the receiver and the network address of the sender identify different networks;

determine whether a location response flag indicates remote or local;

allow the data communication connection to be established between the sender and the apparatus if the location response flag indicates local and the sender is determined to be local with respect to the apparatus;

allow the data communication connection to be established between the sender and the apparatus if the location response flag indicates remote and the sender is determined to be remote with respect to the apparatus;

prevent the data communication connection from being established between the sender and the apparatus if the location response flag indicates remote and the sender is determined to be local with respect to the apparatus; and

prevent the data communication connection from being established between the sender and the apparatus if the location response flag indicates local and the sender is determined to be remote with respect to the apparatus.

16. The apparatus of claim 15, wherein the data communications module is further operable to:

determine whether a state of a port of the receiver is open or closed, wherein the request indicates the port;

wherein the data communications module is operable to allow the data communication connection to be established between the sender and the apparatus in dependence upon the state of the port being open;

wherein the data communications module being operable to prevent the data communication connection from being established between the sender and the apparatus comprises the data communications module being operable to drop the request if the state of the port is closed and to deny the request if the state of the port is open.

17. The apparatus of claim 16, wherein the data communications module being operable to deny the request comprises the data communications module being operable to send a reset message to the sender.

18. The apparatus of claim 16, wherein the data communications module is further operable to:

deny the request if the state of the port is closed, and if the location response flag indicates local and the sender was determined to be local with respect to the apparatus; and

deny the request if the state of the port is closed, and if the location response flag indicates remote and the sender was determined to be remote with respect to the apparatus.

19. The apparatus of claim 15, wherein the data communications module being operable to determine whether the sender is local or remote with respect to the apparatus based, at least in part, on the network address of the sender and the network address of the apparatus comprises the data communications module operable to perform a logical AND operation on the network address of the sender and a network address mask of the apparatus.

20. The apparatus of claim 15 further comprising a computer readable storage medium having stored therein computer usable program code that embodies the data communication module.