Suppose a firewall is configured to allow outbound TCP connections but inbound connections only to specified ports. The FTP protocol now presents a problem: When an inside client contacts an outside server, the outbound TCP control connection can be opened normally but the TCP data connection traditionally is inbound. (a) Look up the FTP protocol in, for example, Request for Comments 959. Find out how the PORT command works. Discuss how the client might be written so as to limit the number of ports to which the firewall must grant inbound access. Can the number of such ports be limited to one? (b) Find out how the FTP PASV command can be used to solve this firewall problem.

Suppose a firewall is configured to allow outbound TCP connections but inbound connections only to specified ports. The FTP protocol now presents a problem: When an inside client contacts an outside server, the outbound TCP control connection can be opened normally but the TCP data connection traditionally is inbound. (a) Look up the FTP protocol in, for example, Request for Comments 959. Find out how the PORT command works. Discuss how the client might be written so as to limit the number of ports to which the firewall must grant inbound access. Can the number of such ports be limited to one? (b) Find out how the FTP PASV command can be used to solve this firewall problem.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

Write a Java program to create a TCP Socket program to receive an input message from client socket, reverse the input message and send it back to the client. Note that the program should have the comments embedded in it to explicitly explain why that code is being used. Explain in detail the client process and the server process with reference to the code given by you for this task.
In this problem we investigate whether either UDP or TCP provides a degree of end-point authentication. a. Consider a server that receives a request within a UDP packet and responds to that request within a UDP packet (for example, as done by a DNS server). If a client with IP address X spoofs its address with address Y, where will the server send its response? b. Suppose a server receives a SYN with IP source address Y, and after responding with a SYNACK, receives an ACK with IP source address Y with the correct acknowledgment number. Assuming the server chooses a random initial sequence number and there is no "man-in-the-middle," can the server be certain that the client is indeed at Y (and not at some other address X that is spoofing Y)?
The scenario includes one DHCP server in an Active Directory domain. The server is configured to provide IP addresses to DHCP clients on two different subnets. The subnets are separated by a router that has DHCP Forwarding enabled. In this scenario, you use ten of the excluded IP addresses to configure servers and other devices with static IP addresses and five additional IP addresses are left available for static configuration of new devices that you might want to add in the future. Write up the Powershell script for the following according to scenario IP configuration: Installing DHCP role (DHCP1) Creating DHCP security group (your Arid Number) in DHCP1 Note: Security Group should create with your arid number. Authorizing the DHCP1server in DC1 How to getClient4 adapter hardware information Disable and Enable a Network Adapter of Client4
Many packets can travel over a link between two hosts at the same time. Please give a schedule of all the steps that need to be taken to finish one package. Do you think that one delay will take a set amount of time and that the other delay's length can change as needed?
As presented in the text, SMTP involves the exchange of several small messages. In most cases, the server responses do not affect what the client sends subsequently. The client might thus implement command pipelining: sending multiple commands in a single message. (a) For what SMTP commands does the client need to pay attention to the server's responses? (b) Assume the server reads each client message with gets() or the equivalent, which reads in a string up to a . What would it have to do even to detect that a client had used command pipelining? (c) Pipelining is nonetheless known to break with some servers; find out how a client can negotiate its use.
Let's say that Host C is running a Web server that listens on port 80. Suppose that this web server is able to maintain persistent connections and responds to requests from both Host A and Host B. Is Host C sending all of the requests over the same connection, or are there many sockets in use? Do each of them have port 80 even though they are broadcast over separate sockets? It's something you need to discuss and provide some clarification on.
Can someone please help me with this? I'll give a thumb up to thank for your time.As I'm reviewing for my upcoming exam, I really need an answer from an expert in the field. Please do not send me an answer from chatGPT. I've got enough of that, so please be helpful.
Three-way handshake is used by a TCP client and a TCP server to establish a connection, as illustrated below: 1st: client:port1 -> server:port2, SYN 2nd: server:port2 -> client:port1, SYNACK 3rd: client:port1 -> server:port2, ACK When this client is performing scanning attacks, it will generated a large number of failed connections. In each failed connection, the three-way handshake fails to complete. People commonly use SYN together with the absence of its corresponding SYNACK in this same TCP session to identify whether this connection is failed. By investigating the failed connections, an engineer finds that in legitimate/benign cases, if the server does not return SYNACK to the client, the client will not send the ACK packet after SYNACK (e.g., the 3rd packet above). Therefore, this engineer suggests that we can count the failed connections based on the following rules without considering SYNACK: If a client:port1 sends…
What does it mean when an HTTP query has a header field of "Connection: keep-alive"? a. The client can keep the TCP connection open for future requests/responses if this is supported by the server. O b. Use UDP for additional connections to the server. c. Continually send an object from the server to the client until the client has acknowledged receipt of the requested object. O d. Use the QUIC protocol for this connection.
Let's imagine that a computer on the Internet transmits a packet to another computer at the network layer. The logical destination address of the packet has encountered an issue. What address should I use for the package? How will the original computer know when this happens?
Write a rule that will alert on any source IP on any port connecting to any destination IP address on the FTP control port that is referencing the content "Answers.doc". Provide the message of "Bad Student" when this information is found. Use a SID of 1, do not provide spaces in between the parameters delimited by a semicolon, using the order msg, content and sid. An incomplete example of the rule with the correct syntax is: alert tcp any any -> any any (msg: "Test1";sid:1;)
A route must be distributed using an EIGRP parameter, correct? Exit interface and IP address of the following hop are two examples of variables that might alter the administrative distance.