What is meant by iptables and ipchains (how are they similar/different)? Using iptables and iphains, how would you create firewall functionality that allows incoming traffic to a web server (192.168.3.22), and FTP server (also 192.168.3.22) and an email server (192.168.3.33) while prohibiting all other inbound traffic?

What is meant by iptables and ipchains (how are they similar/different)? Using iptables and iphains, how would you create firewall functionality that allows incoming traffic to a web server (192.168.3.22), and FTP server (also 192.168.3.22) and an email server (192.168.3.33) while prohibiting all other inbound traffic?

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 5RQ

See similar textbooks

Similar questions

Q4.A. Explain how a stateless firewall would block all incoming and outgoing HTTPrequests.B. Explain why deep packet inspection cannot be performed on protocols such as SSL and SSH.
A. Describe how a stateless firewall will block all HTTP requests, including incoming and outgoing.B. Describe why protocols like SSL and SSH cannot be subjected to deep packet inspection.
1.a. Explain how a stateless firewall would block all incoming and outgoing HTTP requests. 1.b. Explain why deep packet inspection cannot be performed on protocols such as SSL and SSH.
A stateful firewall is placed between a protected network 3.3.3.0/24 and the public Internet. Hosts outside the protected network are to be allowed to access a web server (port 80) at 3.3.3.10 and an SMTP server (port 25) at 3.3.3.11. Hosts on the protected network are allowed to access outside web and E-mail servers, except for those located on the network 4.4.0.0/16. All traffic not explicitly allowed is to be denied. Design a rule base for the firewall to implement this policy.
What are the main reasons why a VPN is the right solution for protecting the network perimeter? Do they also provide protection for mobile devices? Explain the difference between an access control list (ACL) that is used in routers to block traffic and firewalls. What similarities do they share?
Define the following protocols, how they work, and give example how and where to implement it. 1. PEM - Privacy Enhanced Mail 2. IPsec - Internet Protocol Security 3. VPN – virtual private networks 4. SET- Secure Electronic Transactions 5. DMARC-Domainbased Message Authentication, Reporting and Conformance 6. Terminal Access Controller Access Control System (TACACS+ ) 7. Kerberos 8. S/mime - Secure/Multipu rpose Internet Mail Extensions 9. DTLS - Datagram Transport Layer Security 10. PKI – public key Infrastructure 11. Digital watermarking and what is blind, semi-blind, non-blind watermarking 12. SSH , SSL/TLS
Why can traditional networking security devices NOT be used to block Web application attacks? a. Traditional network security devices ignore the content of HTTP traffic, which is the vehicle of Web application attacks. b. Web application attacks use Web browsers that cannot be controlled on a local computer. c. Network security devices cannot prevent attacks from Web resources. d. The complex nature of TCP/IP allows for too many ping sweeps to be blocked.
Discuss the operation of a Layer 4 (Transport Layer) firewall. How does it inspect and control network traffic based on ports and protocols?
Consider the following threats to Web security and describe how each is countered by a particular feature of TLS. A. Password Sniffing: Passwords in HTTP or other application traffic are eavesdropped. B. IP Spoofing: Uses forged IP addresses to fool a host into accepting bogus data. C. IP Hijacking: An active, authenticated connection between two hosts is disrupted, and the attacker takes the place of one of the hosts. D. SYN Flooding: An attacker sends TCP SYN messages to request a connection, but does not respond to the final message to establish the connection fully. The attacked TCP module typically leaves the “half-open connection” around for a few minutes. Repeated SYN messages can clog the TCP module.
What are the main reasons why a VPN is the right solution for protecting the network perimeter? Do they also provide protection for mobile devices? (2-3 paragraphs) In no less than 250 words, explain the difference between an access control list (ACL) that is used in routers to block traffic and firewalls. What similarities do they share?
What measures may be taken to prevent DNS tunneling? How can you recognize port scanning attempts and block them? Comparison of DDoS mitigation with encryption hashing What is TCP/IP? What is the point of doing DNS monitoring? What is the relationship between MAC addresses, ARP, and TCP/IP? WAF? Disparities in policies, procedures, and guidelines Examine the following International Olympic Committees and propose them if you agree with them:
Native authentication and authorization services are run step by step when a web client seeks access to protected resources on a web server. What are the two most compelling reasons for using layered protocols? Provide particular examples to back up your claims.