Provide a filter table (similar to table 8.6 in lecture notes 32) that is as restrictive as possible but accomplishes the following: Allows all internal users to establish Telnet sessions with external hosts. Telnet is an application (which runs over TCP) allows remote access to network hosts. The telnet server listens on port 23. Otherwise blocks all inbound (incoming) and outbound (outgoing) traffic. The internal network is 222.22/16. In your solution, provide a filter table similar to table 8.6 with appropriate IP addresses and port numbers

Provide a filter table (similar to table 8.6 in lecture notes 32) that is as restrictive as possible but accomplishes the following: Allows all internal users to establish Telnet sessions with external hosts. Telnet is an application (which runs over TCP) allows remote access to network hosts. The telnet server listens on port 23. Otherwise blocks all inbound (incoming) and outbound (outgoing) traffic. The internal network is 222.22/16. In your solution, provide a filter table similar to table 8.6 with appropriate IP addresses and port numbers

Principles of Information Security (MindTap Course List)

6th Edition

ISBN:9781337102063

Author:Michael E. Whitman, Herbert J. Mattord

Publisher:Michael E. Whitman, Herbert J. Mattord

Chapter6: Security Technology: Access Controls, Firewalls, And Vpns

Section: Chapter Questions

Problem 2RQ

See similar textbooks

Similar questions

Let's say that Host C is running a Web server that listens on port 80. Suppose that this web server is able to maintain persistent connections and responds to requests from both Host A and Host B. Is Host C sending all of the requests over the same connection, or are there many sockets in use? Do each of them have port 80 even though they are broadcast over separate sockets? It's something you need to discuss and provide some clarification on.
Let's pretend Host C is running an HTTP server on port 80. Consider that this Web server allows both Host A and Host B to establish persistent connections. Does Host C always send requests using the same socket? Does port 80 exist on both ends if they travel across separate sockets? You ought to discuss and elaborate on the matter.
QUESTION 19 Suppose a process in Host C has a UDP socket with port number 4320. Suppose both Host A and Host B each send a UDP segment to Host C with destination port number 4320. Then both of these segments will be directed to the same socket with port number 4320 at Host C True False QUESTION 20 With TCP’s flow control mechanism, where the receiver tells the sender how much free buffer space it has (and the sender always limits the amount of outstanding, unACKed, in-flight data to less than this amount), it is not possible for the sender to send more data than the receiver has room to buffer. True False
Let's pretend Host C is running a Web server on port 80. Suppose this Web server allows both Hosts A and B to make persistent connections. Is it possible that Host C is sending several requests over the same socket? Does port 80 exist in each of these connections if they are being sent through separate sockets? You should discuss and elaborate on this.
Consider Figure 3.58 . Assuming TCP Reno is the protocol experiencing the behavior shown above, answer the following questions. In all cases, you should provide a short discussion justifying your answer.j. Suppose TCP Tahoe is used (instead of TCP Reno), and assume that triple duplicate ACKs are received at the 16th round. What are the ssthresh and the congestion window size at the 19th round?k. Again suppose TCP Tahoe is used, and there is a timeout event at 22nd round. How many packets have been sent out from 17th round till 22nd round, inclusive?
consider 3 hosts (A , B and C) where A is running 3-TCP process, B has 1-TCP process and C is running 2-UDP process all process are trying to connect to a web server to download a file . How many new socket(s) will be created at the server side? Explain why?
Host A is sending an enormous file to Host B over a TCP connection. Over this connection there is never any packet loss and the timers never expire. Denote the transmission rate of the link connecting Host A to the Internet by R bps. Suppose that the process in Host A is capable of sending data into its TCP socket at a rate S bps, where S=10·R. Further suppose that the TCP receive buffer is large enough to hold the entire file, and the send buffer can hold only one percent of the file. What would prevent the process in Host A from continuously passing data to its TCP socket at rate S bps? TCP flow control? TCP congestion control? Or something else? Elaborate.
In this problem, we use the useful dig tool available on Unix and Linux hosts to explore the hierarchy of DNS servers. Recall that in Figure 2.19, a DNS server in the DNS hierarchy delegates a DNS query to a DNS server lower in the hierarchy, by sending back to the DNS client the name of that lower-level DNS server. First read the man page for dig, and then answer the following questions. Starting with a root DNS server (from one of the root servers [a-m].root-servers.net), initiate a sequence of queries for the IP address for your department’s Web server by using dig. Show the list of the names of DNS servers in the delegation chain in answering your query. Please tell me how I should use dig and which part of output I should write for answer this question, best with picture example, thank you!
True or false? Host A is sending Host B a large file over a TCP connection. Assume Host B has no data to send Host A. Host B will not send acknowledgments to Host A because Host B cannot piggyback the acknowledgments on data.
Consider the Scenario network. Suppose all hosts A and B have such set timeout values. a. Argue that increasing the size of the router's finite buffer may decrease output (out). b. Now suppose that all hosts change their timeout (like TCP) dynamically on the basis of the buffer time on the router. Will the buffer size increase help to increase the output? Why?
29. The following figure shows the IP addresses of t he interfaces connecting routers R1, R2, and R3. A static route is configured on R1 using the com mand ip route-static 10.0.23.0 24 10.0.13.3, so th at the IP address 10.0.23.3 of GE0/0/2 on R3 can be pinged from R1. To prevent the communicati on failure between R1 and R3 in the event of the link between them becoming faulty, a backup lin k to 10.0.23.3 needs to be configured. Which of t he following commands should be used to confi gure the backup link? A. [R1] ip route-static 10.0.23.0 24 10.0.12.2 preference 40 B. [R1] ip route-static 10.0.23.0 24 10.0.12.2 preference 80 C. [R1] ip route-static 10.0.23.0 24 10.0.12.2 preference 40 [R3] ip route-static 10.0.12.0 24 10.0.23.2 D. [R1] ip route-static 10.0.23.0 24 10.0.12.2 preference 80 [R3] ip route-static 10.0.12.0 24 10.0.23.2
Consider 2 hosts, Host A and Host B, transmitting a large file to a Server C over a bottleneck link with a rate of R kbps. To transfer the file, the hosts use TCP with the same parameters (including MSS and RTT) and start their transmission at the same time. Host A uses a single TCP connection for the entire file, while Host B uses 9 simultaneous TCP connections, each for a portion (i.e. a chunk) of the file. Describe the relative transmission rates achieved by each host at the beginning of the file transfer?