SHARE
SPREAD
HELP

The Tradition of Sharing

Help your friends and juniors by posting answers to the questions that you know. Also post questions that are not available.


To start with, Sr2Jr’s first step is to reduce the expenses related to education. To achieve this goal Sr2Jr organized the textbook’s question and answers. Sr2Jr is community based and need your support to fill the question and answers. The question and answers posted will be available free of cost to all.

 

#
Authors:
James F. Kurose, Keith W. Ross
Chapter:
Security In Computer Networks
Exercise:
Problems
Question:25 | ISBN:9780132856201 | Edition: 6

Question

Provide a filter table and a connection table for a stateful firewall that is as restrictive as possible but accomplishes the following:

a. Allows all internal users to establish Telnet sessions with external hosts.

b. Allows external users to surf the company Web site at 222.22.0.12.

c. But otherwise blocks all inbound and outbound traffic.

The internal network is 222.22/16. In your solution, suppose that the connec- tion table is currently caching three connections, all from inside to outside. You’ll need to invent appropriate IP addresses and port numbers.

TextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbookTextbook

Answer

a,b,c)

The following filter table is used to accepts all internal users to establish Telnet sessions with external hosts and accepts external users to surf the company Web site at 222.22.0.12, but locks all inbound and outbound traffic.

The following connection table is used to verify the connection table to know whether the packet is a part of an ongoing TCP connection or not. If the packet is not a part of connection, then firewall rejects the packet data.

0 0

Discussions

Post the discussion to improve the above solution.