The network address for an organisation’s network is 54.33.112.0/23. Provide the subset of the filter table for a stateless firewall that includes the following rules: - Allows all internal users to establish HTTP with any external hosts but blocks FTP. - Allows external users to browse the company web page at 54.33.112.4 - Allow incoming TELNET requests to all organisation hosts apart from those in subnet 54.33.112.0/24 THIS IS ALL INFORMATION PROVIDED PLEASE

The network address for an organisation’s network is 54.33.112.0/23. Provide the subset of the filter table for a stateless firewall that includes the following rules: - Allows all internal users to establish HTTP with any external hosts but blocks FTP. - Allows external users to browse the company web page at 54.33.112.4 - Allow incoming TELNET requests to all organisation hosts apart from those in subnet 54.33.112.0/24 THIS IS ALL INFORMATION PROVIDED PLEASE

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 5RQ

See similar textbooks

Similar questions

When setting up port forwarding on an external firewall to pass HTTP traffic from the Internet to an internal web server, the external address and port are 208.40.235.38:8080. What is the internal IP address and port, assuming the most common port for that protocol?
Please explain what subnet mask 255.255.255.252 (/30) is and how it can be used to enhance network security with an example.
The secure socket layer (SSL) protocol enables a client and a server to communicate securely. The SSLv2 protocol is known to have vulnerabilities. A man-in-the-middle attacker may push communication to a less secure level before attempting to decrypt the data. Encrypted communications may potentially be truncated by the attacker. SSLv3 has addressed these vulnerabilities (TLSv1). SSLv2 and SSLv3 are supported by the majority of servers and clients. For backward compatibility, SSLv2 is enabled by default. Please respond to the following questions. a) Determine the effect of the above statement. c) What is the answer to this problem? c) Do you believe SSLv3 is more secure than SSLv2? Justify your response.
A small ISP administers the IPv4 address range defined by the prefix 171.93.65.0/24. The ISP has four clients, each require up to 56 addresses each. Allocate the address range of the ISP to all clients. In particular, write the subnetwork address (address prefix) of the subnet for each client.
VLSM A company has an IP rage of 10.1.128.0/19. Provide step by step to divide the company networks into the following subnets: Management team: 50 hosts • Head quarter office: 1100 hosts • Manufacturing site: 1024 hosts • 1st branch 300 hosts 2nd branch 255 hosts
Calculate IPV4 Address Subnets in the following given Table. Given: Host IP address: Default Subnet Mask: 255.255.255.0 196.168.10.0 New Subnet Mask: 255.255.255.192 Determine: Number of Subnets Created: per Subnet: Network Address of this Subnet: Number of Hosts IPV4 Address of First Host on this Subnet: IPV4 Broadcast Address on this Subnet:
Your network has an external filtering router whose IP address is 10.10.10.1. What do the following firewall rules do? Protocol TCP TCP a) None of these Source Addr 10.10.10.1 ANY b) Prevent internal communication directly with the firewall a) c) Prevent external communication directly with the firewall d) Prevent all communication directly with the firewall b) Protocol ICMP Protocol ICMP c) None of these d) Question 6 The most common ICMP command is ping, which stands for Packet Internet Groper (yes, that's what it stands for). It determines if a host is unreachable on the network. To prevent attackers from using ping to identify some of your resources, you need to establish specific firewall rules regarding ICMP packets. The tables below are specific to ICMP. Which of the following blocks ping packets from locating internal hosts? Note that the columns are different for ICMP than what you've seen for TCP. Protocol ICMP Source Port ANY ANY Source Addr ANY Source Addr ANY Source Addr…
Outline the process through which a stateless firewall rejects all HTTP requests.
DNS is a global system for changing IP addresses to human-readable domain names. When a user tries to access a web address like "education.com", their web browser or application performs a DNS Query against a DNS server, supplying the hostname. The DNS server takes the hostname and resolves it into a numeric IP address, which the web browser can connect to.
Authentication ProtocolsConsider the following 4-message protocol:1. A → S: (B, {(A, K1)}KpbS)2. S → B: A3. B → S: (A, {(B, K2)}KpbS)4. S → A: (B, {K2}K1) Which of the following statements is true, at the end of the protocol, and with regards to the purpose of the protocol:a) Both A and B establish a session key K2, and B is sure of A’s identityb) Both A and B establish a session key K1, and B is sure of A’s identityc) Both A and B establish a session key K1, and A is sure of B’s identityd) Both A and B establish a session key K1, and both B and A are sure of each other’s identitye) Both A and B establish a session key K2, and A is sure of B’s identityf) Both A and B establish a session key K1g) Both A and B establish a session key K2h) Both A and B authenticate each other by knowing each other’s identitiesi) A ends up knowing B’s identityj) B ends up knowing A’s identityk) None of the abovel) All of the above Explain your answer below:
IP fragmentation is an Internet Protocol (IP) process that breaks packets into smaller pieces (fragments), so that the resulting pieces can pass through a link with a smaller maximum transmission unit (MTU) than the original packet size.EXPLAIN in details why the fragmentation is considered as a harmful method to be used in internet protocols.
An attacker can not use spoofed source IP addresses when launching TCP SYN Flood attacks.