@inproceedings{e24151b4b59b4cb08f663ca7b1ed2b4a,
title = "Design and implementation of client IP notification feature on DNS for proactive firewall system",
abstract = "The attempts of malicious access and attacks from the Internet to the internal computers of organizations never stop today and corresponding countermeasure for each technique is required. Most organizations introduce some firewall facilities as one of the solutions to protect their internal computers as well networks from those attacks. However, in most organizations, the network administrator has to deploy the policies on the firewall system manually based on the layer 3 and 4 information and only identified communication peers can be controlled by the policy-base firewall system. To solve these problems, we focused on the domain name resolution which happens prior to most TCP/IP communications and approach a new mechanism: adaptively investigable firewall system based on DNS query initiator by notifying the DNS query side client IP address to the target DNS server. In this paper, we mainly present the detail of design and implementation of the client IP address notification feature in the caching DNS server by embedding the subnet address as well as subnet mask of the query source client by practically using the DNS expanded standard (EDNS0).",
keywords = "Client IP Notification, DNS, Firewall, SDN",
author = "Tomokazu Otsuka and Gada and Nariyoshi Yamai and Kiyohiko Okayama and Yong Jin",
note = "Publisher Copyright: {\textcopyright} 2015 IEEE.; 39th IEEE Annual Computer Software and Applications Conference Workshops, COMPSACW 2015 ; Conference date: 01-07-2015 Through 05-07-2015",
year = "2015",
month = sep,
day = "21",
doi = "10.1109/COMPSAC.2015.220",
language = "English",
series = "Proceedings - International Computer Software and Applications Conference",
publisher = "IEEE Computer Society",
pages = "127--132",
editor = "Ahamed, {Sheikh Iqbal} and Chang, {Carl K.} and Ivica Crnkovic and Pao-Ann Hsiung and Jingwei Yang and Gang Huang and William Chu",
booktitle = "Proceedings - 2015 IEEE 39th Annual Computer Software and Applications Conference Workshops, COMPSACW 2015",
address = "United States",
}