eth1:1.11 eth1: 2.21 1 eth1: 1.1 4 neta netb 2 eth2: 2.1 5 eth1: 1.12 eth1: 2.22 where the router connecting the two subnets together, Nodes 1 and 2 are 'inside' of the subnet neta, Nodes 4 and 5 are 'outside' of neta and Node 3 with a firewall is the gateway of neta. Try to write rules as general as possible. For example, although there are only two nodes outside, try to write rules such that the policy is achieved even if there were more than two nodes outside. Suppose the default policy is ACCEPT in the firewall on Node 3. Write packet filtering rules for the following goals (each of which is treated separately): Rule 1. Block ping (icmp) packets being forwarded between the two subnets; Rule 2. Block ping packets coming into the firewall; Rule 3. Prevent Nodel from SSHing to any outside nodes; Change the default policy as DROP and write packet filtering rules for the following golas: Rule 4. Allow inside hosts can access outside websites; Rule 5. Allow outside hosts can SSH into Nodel. No other access should be allowed.

eth1:1.11 eth1: 2.21 1 eth1: 1.1 4 neta netb 2 eth2: 2.1 5 eth1: 1.12 eth1: 2.22 where the router connecting the two subnets together, Nodes 1 and 2 are 'inside' of the subnet neta, Nodes 4 and 5 are 'outside' of neta and Node 3 with a firewall is the gateway of neta. Try to write rules as general as possible. For example, although there are only two nodes outside, try to write rules such that the policy is achieved even if there were more than two nodes outside. Suppose the default policy is ACCEPT in the firewall on Node 3. Write packet filtering rules for the following goals (each of which is treated separately): Rule 1. Block ping (icmp) packets being forwarded between the two subnets; Rule 2. Block ping packets coming into the firewall; Rule 3. Prevent Nodel from SSHing to any outside nodes; Change the default policy as DROP and write packet filtering rules for the following golas: Rule 4. Allow inside hosts can access outside websites; Rule 5. Allow outside hosts can SSH into Nodel. No other access should be allowed.

Database System Concepts

7th Edition

ISBN:9780078022159

Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan

Chapter1: Introduction

Section: Chapter Questions

Problem 1PE

See similar textbooks

Similar questions

21.) Consider the following configuration. Computer “A” IP address: 172.16.100.100 Subnet mask: 255.255.0.0 Computer “B” IP address: 172.16.200.200 Subnet mask: /16 What should be done to allow these computers to send and receive data to and from each other? A.) Nothing needs to be changed. B.) Delete the subnet mask from each computer. C.) A router must be configured and placed between the two computers. D.) Remove the hub between the two computers and replace it with a switch.
Given the following topology of a network (see photo,) the router Node 3 connects the two subnets together: Nodes 1 and 2 are ’inside’ of the subnet neta, Nodes 4 and 5 are ’outside’ of neta and Node 3 with a firewall is the gateway of neta. Suppose in the firewall on Node 3 the default policy is ACCEPT. Write packet filtering rules for the following goals. Try to write rules as general as possible, e.g., although there are only two nodes outside, try to write rules such that the policy is achieved even if there were more than two nodes outside. Each goal in the following is to be treated independently. (a) Set a rule in Node 3 that blocks all ping packets from outside coming into the subnetneta;
Explain in detail how a computer technician would go about statically setting up theIPv4 address 192.168.10.25 in Windows 10 with its default subnet mask and a Router and DNS address of 192.168.10.2
Alice, Bob and Mallory are all on a local network. Mallory is an off-path attacker with a super-fast connection: her packets always arrive first. Assume Mallory knows the MAC and IP addresses of Alice and Bob's computers. Assume that Alice will accept the first valid packet she receives as coming from Bob, and ignore what happens once Bob's real packet arrives. Alice and Bob are communicating through UDP on some unknown ports. What does Mallory need to guess to insert a fake UDP datagram from Bob to Alice? Alice and Bob are communicating through TCP on some unknown ports. What does Mallory need to guess to insert a fake TCP packet from Bob to Alice? Alice is about to send a DNS request to Bob's resolver for 1.2.3.4.5.6.7.com. What does Mallory need to guess to spoof the reply? ( Alice is about to send an ARP request for Bob's MAC address. What does Mallory need to guess to spoof the reply? If Mallory was on-path, could she spoof all of the above responses with a 100% success rate.
Packet Tracer - Configure NAT for IPv4 Objectives Configure Dynamic NAT with PAT Configure Static NAT Background / Scenario In this lab, you will configure a router with dynamic NAT with PAT. This will translate addresses from the three internal LANs to a single outside address. In addition, you will configure static NAT to translate an internal server address to an outside address. Instructions In this activity you will only configure router R2. Use a named ACL to permit the addresses from LAN1, LAN2, and LAN3 to be translated. Specify the LANs in this order. Use the name R2NAT. The name you use must match this name exactly. Create a NAT pool named R2POOL. The pool should use the first address from the 209.165.202.128/30 address space. The pool name you use must match this name exactly. All translated addresses must use this address as their outside address. Configure NAT with the ACL and NAT pool that you have created. Configure static NAT to map the local.pka…
Please answer all the three choosing the answer option. Thanks a lot in advance. 54) ___________ A passive IDS can terminate sessions by using the TCP-RST command. Answer True or False. 55) ____________ Switch function partially as routers at layer 3, load distributors at layed 4, and content filters at layer 6. Answer: True or False 57) A ___________ is a portion of a network with a common network address. answer: True or False
Consider a class C network with the subnet mask 255.255.255.41. How many network id (NID) and host id (HID) are there in the subnet mask? (A) 24,3 (B) 24,5 (C) 20,6 D) 20, 8
Using packet tracer, implement a network that has the following components: 1- At least five routers 2- At least 7 subnets 3- At least 12 PCs 4- At least 4 switches 5- Use RIP routing protocol To assign IP addresses of the routers and PCs, use the IP address from your ID as follows Assume your id is 118zyxw, Consider the numbers z, y, x and w as deciemal You have the subnet 118.0.0.0/24 If your ID is 1181234 then the IP is 118.0.0.0/24 Use this subnet to get at least 7 subnets.
Consider a class C network with the subnet mask 255.255.255.41. How many network and host id (HID) are there in the subnet mask? (A) 24.3 (B) 24,5 (C) 20.6 (D) 20, 8
QUESTION 67 Explain what happen in the following scenario in TCP A sends the first segment to B (successfully delivered) A sends the second segment to B (successfully delivered) B sends the ACK for the first segment (dropped) B sends the ACK for the second segment (successfully delivered) QUESTION 68 What is the need to IP address? why not to simply use MAC addresses?
Given the following network: 192.168.10.0/24. Subnet this network with a /25 subnet mask. Answer the following questions: What is the class of the 192.168.10.0/24? Using/25, how many networks are available? Using/25, how many valid hosts per network are available? Using/25, what is the subnet mask? Using/25, what is the broadcast address?
. Assume: Your laptop's Ethernet address is 0a:0b:0c:0d:0e:0f, DHCP server address is 131.111.7.3, your IPv4 address will be 131.111.7.121, the gateway's IP address is 131.111.7.1, and Ethernet address is 00:01:02:03:04:05, the network subnet mask is 255.255.255.0.Write the series of protocol/packet exchanges that occur on the wired Ethernet link, up until you can send a single packet to 128.232.0.20. You do not need to describe packets after this packet has left the link. Include ARP and DHCP