Public network access server having a user-configurable firewall

1. A method of controlling access to a first device connected to a network by a server, the method comprising:

maintaining, at the server, a user-changeable firewall that is changeable by an individual user of the first device; and

granting access to the first device from the network conditioned on whether access to the first device is allowed by the user-changeable firewall, wherein the user-changeable firewall allows an inbound connection from a second device to be established with the first device conditioned on whether an outbound connection was previously established between the first device and the second device.

2. The method of claim 1 , wherein granting access to the first device includes:

receiving, at the server, a request to establish a connection between the second device and the first device; and

if allowed by the user-changeable firewall, establishing the connection between the second device and the first device.

3. The method of claim 2 , wherein the connection is the inbound connection.

4. The method of claim 1 , wherein granting access to the first device includes:

receiving, at the server, an inbound packet from the second device; and

if allowed by the user-changeable firewall, forwarding the inbound packet to the first device.

5. The method of claim 4 , wherein the inbound packet is formatted according to a first protocol.

6. The method of claim 5 , wherein the first protocol is used by the network.

7. The method of claim 5 , wherein the inbound packet is encapsulated according to another protocol before being forwarded to the first device.

8. The method of claim 7 , wherein the other protocol is used by a value-added network connected to the server.

9. The method of claim 7 , further comprising de-encapsulating the encapsulated inbound packet at the first device.

10. The method of claim 1 , further comprising:

receiving a change to the user-changeable firewall from the individual user of the first device; and

providing the change to the server.

11. The method of claim 1 , wherein the user-changeable firewall prohibits establishing inbound connections.

12. The method of claim 1 , wherein the user-changeable firewall allows inbound connections to be established.

13. The method of claim 1 , wherein the network is a public network.

14. The method of claim 1 , wherein the server is an access server.

15. The method of claim 1 , further comprising maintaining, at the server, a list including addresses of devices that is referenced in connection with granting access to the first device.

16. The method of claim 15 , wherein the list includes the addresses of the devices that are not allowed to access the first device.

17. The method of claim 15 , wherein the list includes the addresses of the devices that are allowed to access the first device.

18. The method of claim 17 , wherein the list includes the addresses of the devices with which the first device has previously established outbound connections.

19. The method of claim 18 , wherein the user-changeable firewall searches the list before granting access to the first device from the second device.

20. The method of claim 18 , further comprising:

receiving, at the server, a request from the first device to establish a connection between the first device and the second device;

comparing an address of the second device to the addresses stored in the list; and

adding the address of the second device to the list if the address is not present in the list.

21. The method of claim 20 , wherein the connection is the outbound connection.

22. The method of claim 1 , further comprising:

encapsulating a packet at the first device; and

forwarding the packet to the server.

23. The method of claim 22 , wherein the packet is an outbound packet.

24. The method of claim 23 , further comprising:

receiving, at the server, the outbound packet from the first device;

de-encapsulating the outbound packet; and

forwarding the outbound packet to the second device.

25. The method of claim 1 , wherein access is granted only if the outbound connection was previously established by the first device with the second device.

26. The method of claim 1 , wherein the first device is a client computer and the second device is an outside computer that is remote from the client computer and is configured to communicate with the client computer through the network.

27. A system for controlling access to a first device connected to a network, the system comprising:

a server connected to the first device and the network;

server software in a computer-readable medium comprising instructions for causing the server to perform the following operations:

maintain a user-changeable firewall that is changeable by an individual user of the first device; and

grant access to the first device from the network conditioned on whether access to the first device is allowed by the user-changeable firewall, wherein the user-changeable firewall allows an inbound connection from a second device to be established with the first device conditioned on whether an outbound connection was previously established between the first device and the second device; and

client software in a computer-readable medium comprising instructions for causing the first device to perform the following operations:

receive a change to the user-changeable firewall from a user of the first device; and

provide the change to the server computer.

28. The system of claim 27 , wherein the server software further comprises instructions to:

receive, at the server, a request to establish a connection between the second device and the first device; and

if allowed by the user-changeable firewall, establish the connection between the second device and the first device.

29. The system of claim 28 , wherein the connection is the inbound connection.

30. The system of claim 27 , wherein the server software further comprises instructions to:

receive, at the server, an inbound packet from the second device; and

if allowed by the user-changeable firewall, forward the inbound packet to the first device.

31. The system of claim 30 , wherein the inbound packet is formatted according to a first protocol.

32. The system of claim 31 , wherein the first protocol is used by the network.

33. The system of claim 31 , wherein the inbound packet is encapsulated according to another protocol before being forwarded to the first device.

34. The system of claim 33 , wherein the other protocol is used by a value-added network connected to the server.

35. The system of claim 33 , wherein the client software further comprises instructions to de-encapsulate the encapsulated inbound packet.

36. The system of claim 27 , wherein the network is a public network.

37. The system of claim 27 , wherein the server is an access server.

38. The system of claim 27 , wherein the server software further comprises instructions to:

receive, at the server, a request from the first device to establish a connection between the first device and the second device;

maintain, at the server, a list including addresses of devices that is referenced in connection with granting the access to the first device;

compare, at the server, an address of the second device with the addresses stored in the list; and

add the address of the second device to the list if the address is not present in the list.

39. The system of claim 38 , wherein the connection is the outbound connection.

40. The system of claim 38 , wherein the list includes the addresses of the devices that are allowed to access the first device.

41. The system of claim 40 , wherein the list includes the addresses of the devices with which the first device has previously established outbound connections.

42. The system of claim 41 , wherein the user-changeable firewall searches the list before granting access to the first device from the second device.

43. The system of claim 27 , wherein the client software further comprises instructions to:

encapsulate a packet at the first device; and

forward the packet to the server.

44. The system of claim 43 , wherein the packet is an outbound packet.

45. The system of claim 44 , wherein the server software further comprises instructions to:

receive, at the server the outbound packet from the first device;

de-encapsulate the outbound packet; and

forward the outbound packet to the second device.

46. The system of claim 27 , wherein the server software includes instructions for causing the server to grant the inbound connection from the second device only if the outbound connection was previously established by the first device with the second device.

47. The system of claim 27 , wherein the first device is a client computer and the second device is an outside computer that is remote from the client computer and is configured to communicate with the client computer through the network.

48. A server for controlling access to a first device connected to a network, the server comprising:

a first port for connecting the server to the first device;

another port for connecting the server to the network; and

software in a computer-readable medium comprising instructions for causing the server to perform the following operations:

maintain a user-changeable firewall that is changeable by a user of the first device; and

condition a grant of access to the first device from the network based upon whether the grant of access is allowed by the user-changeable firewall, wherein the user-changeable firewall allows an inbound connection from a second device to be established with the first device conditioned on whether an outbound connection was previously established between the first device and the second device.

49. The server of claim 48 , wherein the software further comprises instructions to:

receive, at the server, a request to establish a connection between the second device and the first device; and

if allowed by the user-changeable firewall, establish the connection between the second device and the first device.

50. The server of claim 49 , wherein the connection is the inbound connection.

51. The server of claim 48 , wherein the software further comprises instructions to:

receive, at the server, an inbound packet from the second device; and

if allowed by the user-changeable firewall, forward the inbound packet to the first device.

52. The server of claim 51 , wherein the inbound packet is formatted according to a first protocol.

53. The server of claim 52 , wherein the first protocol is used by the network.

54. The server of claim 52 , wherein the inbound packet is encapsulated according to another protocol before being forwarded to the first device.

55. The server of claim 54 , wherein the other protocol is used by a value-added network connected to the server.

56. The server of claim 48 , wherein the network is a public network.

57. The server of claim 48 , wherein the server is an access server.

58. The server of claim 48 , wherein the software further comprises instructions to:

receive, at the server, a request from the first device to establish a connection between the first device and the second device;

maintain, at the server, a list including addresses of devices that is referenced in connection with granting the access to the first device;

compare an address of the second device with addresses stored in the list; and

add the address of the second device to the list if the address is not present in the list.

59. The server of claim 58 , wherein the connection is the outbound connection.

60. The server of claim 58 , wherein the list includes the addresses of the devices that are allowed to access the first device.

61. The server of claim 60 , wherein the list includes the addresses of the devices with which the first device has previously established outbound connections.

62. The server of claim 61 , wherein the user-changeable firewall searches the list before granting access to the first device from the second device.

63. The server of claim 48 , wherein the software further comprises instructions to:

receive, at the server, an outbound packet from the first device;

de-encapsulate the outbound packet; and

forward the outbound packet to the second device.

64. The server of claim 48 , wherein the software includes instructions for causing the server to grant the inbound connection from the second device only if the outbound connection was previously established by the first device with the second device.

65. The server of claim 48 , wherein the first device is a client computer and the second device is an outside computer that is remote from the client computer and is configured to communicate with the client computer through the network.

66. The method of claim 1 , further comprising denying access to a third device from the network conditioned on whether access to the first device is allowed by the user-changeable firewall.

67. The system of claim 27 , wherein the server software further comprises instructions for causing the server to deny access to a third device from the network conditioned on whether access to the first device is allowed by the user-changeable firewall.

68. The server of claim 48 , wherein the software further comprises instructions for causing the server to condition a denial of access to the first device from the network based upon whether the grant of access is allowed by the user-changeable firewall.

69. A method of controlling access to a client connected to a network by a server, the method comprising:

maintaining, at the server, a firewall;

receiving at the server a request from the client to change a setting of the firewall;

changing the setting of the firewall based on the request; and

granting access for a third party to establish a connection with the client based on the setting of the firewall, wherein the setting of the firewall allows an inbound connection from the third parry to be established with the client conditioned on whether an outbound connection was previously established between the client and the third party.

70. The method of claim 69 , further comprising denying access for the third party to establish a connection with the client conditioned on whether access to the client is allowed by the setting of the firewall.

71. The method of claim 69 , further comprising receiving at the server a plurality of requests from a plurality of clients to change at least one setting of the firewall associated with each of the plurality of clients.

72. The method of claim 69 , wherein the firewall is maintained by an ISP.