Full function Firewalls on MANETs: A routing storage and query mechanism for ROFL

This paper proposes a routing storage and query mechanism for the ROFL firewall scheme, a mechanism that combines a hierarchical routing storage structure with a fast routing query method. ROFL, which stands for Routing as the Firewall Layer, is a firewall scheme designed mainly to prevent insider attacks on Mobile Ad Hoc Networks (MANETs). The proposed mechanism also extends the filtering capabilities of ROFL, allowing packet filtering based on most any traditional packet filtering criteria, e.g., source IP address, source and destination port numbers, TCP flags, etc.