Methods, systems, and media for adding ip addresses to firewalls

Abstract

Methods, systems, and media for adding IP addresses to firewalls are provided. In some embodiments, the method comprises: receiving a network packet that includes an external IP address associated with an external device, wherein the external device is a device not protected by a firewall; determining whether the external IP address is included in a group of IP addresses maintained by the firewall; determining whether to add the external IP address to the group of IP addresses; identifying an Internet Service Provider (ISP) associated with the external IP address; determining whether the ISP is included in a group of ISPs maintained by the firewall; and in response to determining that the ISP is not included in the group of ISPs maintained by the firewall, adding the external IP address to the group of IP addresses and adding the ISP to the group of ISPs.

What is claimed is: 
     
         1 . A method for adding Internet Protocol (IP) addresses to a firewall, comprising:
 receiving a network packet that includes an external IP address associated with an external device, wherein the external device is a device not protected by the firewall;   determining whether the external IP address is included in a group of IP addresses that are either blocked from receiving data from an internal device protected by the firewall or allowed to receive data from an internal device protected by the firewall; and   in response to determining that the external IP address is not included in the group of IP addresses:
 identifying an Internet Service Provider (ISP) associated with the external IP address; 
 causing a first user interface to be presented to a user, wherein the first user interface includes a preview that shows a web page of a domain associated with the external IP address; 
 adding the external IP address to the group of IP addresses; and 
 causing a second user interface to be presented that indicates a number of network packets that have been blocked and that are associated with the external IP address. 
   
     
     
         2 . The method of  claim 1 , further comprising determining whether to add the external IP address to the group of IP addresses based on input received via the first user interface. 
     
     
         3 . The method of  claim 2 , wherein the first user interface indicates the external IP address and the ISP associated with the external IP address. 
     
     
         4 . The method of  claim 1 , further comprising:
 identifying geographic information associated with the external IP address; and   determining whether to add the external IP address to the group of IP addresses based on the geographic information associated with the external IP address.   
     
     
         5 . The method of  claim 1 , wherein the group of IP addresses are blocked from transmitting data to the internal device. 
     
     
         6 . A system for adding Internet Protocol (IP) addresses to a firewall, the system comprising:
 a memory; and   a hardware processor that is coupled to the memory and that is programmed to:
 receive a network packet that includes an external IP address associated with an external device, wherein the external device is a device not protected by the firewall; 
 determine whether the external IP address is included in a group of IP addresses that are either blocked from receiving data from an internal device protected by the firewall or allowed to receive data from an internal device protected by the firewall; and 
 in response to determining that the external IP address is not included in the group of IP addresses:
 identify an Internet Service Provider (ISP) associated with the external IP address; 
 cause a first user interface to be presented to a user, wherein the first user interface includes a preview that shows a web page of a domain associated with the external IP address; 
 add the external IP address to the group of IP addresses; and 
 cause a second user interface to be presented that indicates a number of network packets that have been blocked and that are associated with the external IP address. 
 
   
     
     
         7 . The system of  claim 6 , wherein the hardware processor is further programmed to determine whether to add the external IP address to the group of IP addresses based on input received via the first user interface. 
     
     
         8 . The system of  claim 7 , wherein the first user interface indicates the external IP address and the ISP associated with the external IP address. 
     
     
         9 . The system of  claim 6 , wherein the hardware processor is further programmed to:
 identify geographic information associated with the external IP address; and   determine whether to add the external IP address to the group of IP addresses based on the geographic information associated with the external IP address.   
     
     
         10 . The system of  claim 6 , wherein the group of IP addresses are blocked from transmitting data to the internal device. 
     
     
         11 . A non-transitory computer-readable medium containing computer executable instructions that, when executed by a processor, cause the processor to perform a method for adding Internet Protocol (IP) addresses to a firewall, the method comprising:
 receiving a network packet that includes an external IP address associated with an external device, wherein the external device is a device not protected by the firewall;   determining whether the external IP address is included in a group of IP addresses that are either blocked from receiving data from an internal device protected by the firewall or allowed to receive data from an internal device protected by the firewall; and   in response to determining that the external IP address is not included in the group of IP addresses:
 identifying an Internet Service Provider (ISP) associated with the external IP address; 
 causing a first user interface to be presented to a user, wherein the first user interface includes a preview that shows a web page of a domain associated with the external IP address; 
 adding the external IP address to the group of IP addresses; and 
 causing a second user interface to be presented that indicates a number of network packets that have been blocked and that are associated with the external IP address. 
   
     
     
         12 . The non-transitory computer-readable medium of  claim 11 , wherein the method further comprises determining whether to add the external IP address to the group of IP addresses based on input received via the first user interface. 
     
     
         13 . The non-transitory computer-readable medium of  claim 12 , wherein the first user interface indicates the external IP address and the ISP associated with the external IP address. 
     
     
         14 . The non-transitory computer-readable medium of  claim 11 , wherein the method further comprises:
 identifying geographic information associated with the external IP address; and   determining whether to add the external IP address to the group of IP addresses based on the geographic information associated with the external IP address.   
     
     
         15 . The non-transitory computer-readable medium of  claim 11 , wherein the group of IP addresses are blocked from transmitting data to the internal device.