A stateful firewall is placed between a protected network 3.3.3.0/24 and the public Internet. Hosts outside the protected network are to be allowed to access a web server (port 80) at 3.3.3.10 and an SMTP server (port 25) at 3.3.3.11. Hosts on the protected network are allowed to access outside web and E-mail servers, except for those located on the network 4.4.0.0/16. All traffic not explicitly allowed is to be denied. Design a rule base for the firewall to implement this policy.

A stateful firewall is placed between a protected network 3.3.3.0/24 and the public Internet. Hosts outside the protected network are to be allowed to access a web server (port 80) at 3.3.3.10 and an SMTP server (port 25) at 3.3.3.11. Hosts on the protected network are allowed to access outside web and E-mail servers, except for those located on the network 4.4.0.0/16. All traffic not explicitly allowed is to be denied. Design a rule base for the firewall to implement this policy.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

How does the SSH protocol provide secure remote access to systems? Compare it with other remote access protocols like Telnet.
A network on the Internet has a subnet mask of 255.255.240.0. What is the maximum number of hosts it can handle?
Question 37 A sophisticated firewall that can implement any programmable set of conditions is called a O guard Obastion host Ⓒircuit level gateway O packet filter O None of the above Question 38 This IDs infers attacks by tracking suspicious activity over multiple packets O heuristic Osignature based O network based pattern based O None of the above Question 39 The most important and versatile tool (control) for network security practitioner is: O encryption O firewall Ⓒintrusion detection system O canary value paging O segmentation O Nore of the above Question 40 A network security strategy that conceals real, internal IP addresses so that they cannot be directly accessed outside the secure perimeter is called Ⓒ NAT ⒸIEEE 763.5 O Address Spoofing OIP injection O None of the above Question 41 An IPS O can take protective responses to detected attacks O make preventative recommendations when attacks are detected O make proscriptive recommendations when attacks are detected All of the…
The following is a popular deployment of today's computer networks. Internal Network Firewall Internet Web Server Simple Firewall Deployment True False
Remember that TCP/IP's transport stage reassembly and reordering packets. Internet or data layer firewalls may be used if needed. Stateful inspection firewalls cannot detect damaged or missing communication streams.
Computer Science Below are network packet captures of malicious activity discovered on the network. Packets are captured when IDS/IPS or firewalls detect suspicious activity and then record the traffic. Depending on your configuration it may proactively block the traffic but it will ultimately end up as an alert for the SOC to investigate. The packet capture goes beyond the log files and provides a full picture of traffic on the network. In this lab you will be investigating and triaging a number of alerts as if you were a SOC analyst on call. It will be important to provide a technical understanding of the incidents but also put into context the impact to the business and identify the remediation steps. 2. The Business Implications Of These Results Explain how these detections impact the business, what are the short term and long-term risks presented?
When it comes to firewalls, which of the following is TRUE? Using a packet filter firewall, harmful data may be filtered out. No feedback is ever sent to the sender when using a packet filter firewall; they just allow or disallow packets. Each data packet entering and leaving the network is inspected by a packet filter firewall. The application layer may be inspected by a packet filtering firewall.
A router, a firewall, a gateway, a modem, and a network adapter are all pieces of hardware that make sure only files that are allowed to get on the network can get on it.
A virtual private network (VPN) offers superior protection than public Wi-Fi hotspots (VPN). How does the "tunnel mode" function of a virtual private network (VPN) work?
DNS poisoning attacks need to use spoofed source IP addresses for the forged DNS responses sent to the victim recursive DNS server. True False
Why would restricting access to TCP/UDP ports on a router or firewall can protect a network from attacks?
1.a. Explain how a stateless firewall would block all incoming and outgoing HTTP requests. 1.b. Explain why deep packet inspection cannot be performed on protocols such as SSL and SSH.