Abstract: Network communication from a client computer accessing an application service computer through use of the Internet (where the application service computer is normally protected from general Internet access by a firewall) is enabled by validating each computer message instance between the client computer and the application service computer against a first message permissive in a message address confirmation computer and a second message permissive in a firewall-tunnel computer. The firewall-tunnel computer and the message address confirmation computer interface directly to the Internet via secure protocol. The approach enables bi-directional multi-protocol communications by using HTTP protocol communications to the Internet in a computer systems infrastructure without need for re-configuration of firewall or NAT devices installed between the Internet and a network otherwise protected by a firewall or NAT device.