Communication block apparatus and communication block method
A communication block apparatus that blocks communication by an information processing apparatus connected to a network. The communication block apparatus includes a guide unit that guides information transmitted from the information processing apparatus, an identification information acquisition unit that acquires identification information for identifying a notified party of a message from the message of a predetermined protocol higher than a transport layer, the message including information guided by the guide unit, a permission determination unit that determines whether to permit communication by the message at least based on the identification information acquired by the identification information acquisition unit, and a communication permission unit that forwards the message to permit the communication by the information processing apparatus when the permission determination unit determines to permit the communication, regardless of the block of the communication by a communication block unit.
1. A communication block apparatus comprising:
a memory; and
a processor configured to
guide information transmitted from an information processing apparatus connected to a network to the communication block apparatus by notifying the information processing apparatus of a physical address of the communication block apparatus as a physical address of an apparatus other than the information processing apparatus;
set a physical layer decision to block communication by the information processing apparatus by not forwarding information guided by the processor when a predetermined condition is satisfied;
acquire identification information for identifying a notified party of a message from the message of a predetermined protocol higher than a transport layer, the message including the information guided by the processor;
determine an upper-layer decision, which is higher than the physical layer decision, whether to permit communication by the message at least based on the identification information acquired by the processor; and
forward the message which is guided by the processor to the apparatus other than the information processing apparatus to permit the communication by the information processing apparatus when the processor determines the upper-layer decision to permit the communication while the predetermined condition is satisfied and blocking of the communication is enabled, regardless of the physical layer decision to block of the communication by the processor.
2. The communication block apparatus according to claim 1 , the processor further configured to
forward the information guided by the processor to the apparatus other than the information processing apparatus when the predetermined condition is not satisfied.
3. The communication block apparatus according to claim 1 , wherein
processor forwards the message to the apparatus other than the information processing apparatus.
4. The communication block apparatus according to claim 1 , the processor further configured to
set all or part of the identification information of notified parties for which the communication by the message is permitted or notified parties for which the communication by the message is not permitted, wherein
determine whether to permit the communication of the message based on whether the identification information acquired by the processor includes all or part of the identification information set by the processor.
5. The communication block apparatus according to claim 1 , further comprising
when the information guided by the processor includes an inquiry of a logical address corresponding to the identification information, a logical address response unit that returns, in response to the inquiry, a predetermined logical address that is not a logical address of the notified party identified by the identification information.
6. The communication block apparatus according to claim 5 , wherein
a validity period of the predetermined logical address is added to the response by the logical address response unit, and
the validity period of the predetermined logical address is a validity period different from a validity period of the logical address of the notified party identified by the identification information, the validity period of the logical address of the notified party added to the response by a server that returns the logical address of the notified party in response to the inquiry.
7. The communication block apparatus according to claim 6 , wherein
the validity period of the predetermined logical address is a validity period shorter than the validity period of the logical address of the notified party identified by the identification information, the validity period of the logical address of the notified party added to the response by the server that returns the logical address of the notified party in response to the inquiry.
8. The communication block apparatus according to claim 5 , the processor further configured to
communicate with a proxy server that performs communication of the predetermined protocol by proxy, wherein
when the information guided by the processor includes the predetermined logical address as a logical address of a destination and the message includes relative information based on the identification information, the processor changes the relative information in the message to absolute information not based on the identification information and forwards the changed message to the proxy server to permit the communication by the information processing apparatus.
9. A communication block method causing a computer to execute a process, the process comprising:
guiding information transmitted from an information processing apparatus connected to a network to the computer by notifying the information processing apparatus of a physical address of the computer as a physical address of an apparatus other than the information processing apparatus;
setting a physical layer decision to block communication by the information processing apparatus by not forwarding information guided in the guiding when a predetermined condition is satisfied;
acquiring identification information for identifying a notified party of a message from the message of a predetermined protocol higher than a transport layer, the message including the information guided in the guiding;
determining an upper-layer decision, which is higher than the physical layer decision, whether to permit communication by the message at least based on the identification information acquired in the acquiring; and
forwarding the message to the apparatus other than the information processing apparatus to permit the communication by the information processing apparatus when the processor determines the upper-layer decision to permit the communication while the predetermined condition is satisfied and blocking of the communication is enabled, regardless of the physical layer decision to block of the communication in the blocking.
10. A computer-readable non-transitory recording medium recording a program causing a computer to execute a process, the process comprising:
guiding information transmitted from an information processing apparatus connected to a network to the computer by notifying the information processing apparatus of a physical address of the computer as a physical address of an apparatus other than the information processing apparatus;
setting a physical layer decision to block communication by the information processing apparatus by not forwarding information guided in the guiding when a predetermined condition is satisfied;
acquiring identification information for identifying a notified party of a message from the message of a predetermined protocol higher than a transport layer, the message including the information guided in the guiding;
determining an upper-layer decision, which is higher than the physical layer decision, whether to permit communication by the message at least based on the identification information acquired in the acquiring; and
forwarding the message to the apparatus other than the information processing apparatus to permit the communication by the information processing apparatus when the processor determines the upper-layer decision to permit the communication while the predetermined condition is satisfied and blocking of the communication is enabled, regardless of the physical layer decision to block of the communication in the blocking.