Fault reducing firewall system
View Patent ↗Disclosed are two mechanisms for preventing access failures attributable to dynamic port assignment of firewall-blocked ports. The mechanism involves an enhanced firewall that opens blocked ports prior to possible dynamic allocation so that the blocked ports are not available when a port is requested. The second mechanism involves an enhanced commutations stack that works in conjunction with an enhanced firewall to reserve blocked ports so that the blocked ports are not available for dynamic allocation when a port is requested.
1. A method, said method comprising the steps of:
identifying a communications port that is not to be used for communications; and
preventing said communications port from being dynamically allocated for use in communications, wherein said preventing step is accomplished through use of a firewall and wherein said preventing step comprises registering said communications port with a communications stack which thereby causes said communications stack to pre-allocate said communications port prior to when said communications port could be dynamically allocated.
2. The method of claim 1 wherein said preventing step further comprises the step of:
reserving said communication port prior to when said communications port could be dynamically allocated.
3. The method of claim 2 wherein said steps are performed by a firewall.
4. A program product, said program product comprising:
a recordable-type computer-readable media; and
a program stored on said recordable-type computer-readable media, said program being configured to perform the following steps:
identifying a communications port that is not to be used for communications; and
preventing said communications port from being dynamically allocated for use in communications, wherein said preventing step is accomplished through use of a firewall and wherein said preventing step comprises registering said communications port with a communications stack which thereby causes said communications stack to pre-allocate said communications port prior to when said communications port could be dynamically allocated.