For parts (c) to (f) below, consider the following network diagram and packet filtering ruleset where...
Fantastic news! We've Found the answer you've been seeking!
Question:
Transcribed Image Text:
For parts (c) to (f) below, consider the following network diagram and packet filtering ruleset where 192.168.1.0 refers to the subnet 192.168.1/24 which consists of some hosts that perform services in a demilitarized zone (DMZ) and the rest of the devices are computer hosts or servers in a small/ medium sized organization which has domain name smallorg.co.uk. 192.168.1/24 192.168.1.1 ISP Network Access DMZ Router with firewall Source Destination Source Dest Rule Action Protocol address address port port 1 Allow Any 192.168.1.0 TCP 2 Deny 192.168.1.1 Any 3 Deny Any 192.168.1.1 Any || | > 1023 Any Any Any Any Any 4 Allow 192.168.1.0 Any Any Any Any 5 Allow Any 192.168.1.2 TCP Any SMTP 6 Allow Any 192.168.1.3 TCP > 1023 HTTP 7 Deny Any Any Any Any Any (c) Describe the purpose and effect of rulesets 1, 4, and 5 [3 marks] (d) Consider rulesets 2 and 3. Explain why these are important. [3 marks] (e) Discuss how VLANs could be used to effectively segment the internal network of smallorg.co.uk. Show this in a diagram and explain how you would subnet the IP addresses and how traffic would be routed between hosts on different VLANs. [6 marks] (f) What is the importance of IP ingress and egress filtering in the Internet? In your answer particularly identify what the ISP would be filtering with respect to IP packets from smallorg.co.uk and from the network providers attached to the ISP. [5 marks] For parts (c) to (f) below, consider the following network diagram and packet filtering ruleset where 192.168.1.0 refers to the subnet 192.168.1/24 which consists of some hosts that perform services in a demilitarized zone (DMZ) and the rest of the devices are computer hosts or servers in a small/ medium sized organization which has domain name smallorg.co.uk. 192.168.1/24 192.168.1.1 ISP Network Access DMZ Router with firewall Source Destination Source Dest Rule Action Protocol address address port port 1 Allow Any 192.168.1.0 TCP 2 Deny 192.168.1.1 Any 3 Deny Any 192.168.1.1 Any || | > 1023 Any Any Any Any Any 4 Allow 192.168.1.0 Any Any Any Any 5 Allow Any 192.168.1.2 TCP Any SMTP 6 Allow Any 192.168.1.3 TCP > 1023 HTTP 7 Deny Any Any Any Any Any (c) Describe the purpose and effect of rulesets 1, 4, and 5 [3 marks] (d) Consider rulesets 2 and 3. Explain why these are important. [3 marks] (e) Discuss how VLANs could be used to effectively segment the internal network of smallorg.co.uk. Show this in a diagram and explain how you would subnet the IP addresses and how traffic would be routed between hosts on different VLANs. [6 marks] (f) What is the importance of IP ingress and egress filtering in the Internet? In your answer particularly identify what the ISP would be filtering with respect to IP packets from smallorg.co.uk and from the network providers attached to the ISP. [5 marks]
Expert Answer:
Related Book For
Posted Date:
Students also viewed these computer network questions
-
Revenue from Contracts with Customers -- was issued in September 2015 and applies to accounting periods beginning on or after 1 January 2018. IFRS 15 replaces IAS 11- Construction Contracts - and IAS...
-
Q1. You have identified a market opportunity for home media players that would cater for older members of the population. Many older people have difficulty in understanding the operating principles...
-
The Howell Corporation has the following account balances (in millions): Required Prepare an income statement and a supporting schedule of cost of goods manufactured for the year ended December 31,...
-
a. Describe the recording and control function of financial accounting. b. Explain the role of financial accounting with regard to the presentation of final financial statements.
-
The Bank of Canada can perfectly control the amount of reserves in the system. Is this statement true, false, or uncertain? Explain.
-
A system in which no mass transfer occurs across the boundary is called a/an (a) Open system (b) Closed system (c) Isolated system (d) Macroscopic system.
-
Operating data for Conard Corporation are presented below. Instructions Prepare a schedule showing a vertical analysis for 2014 and2013. 2013 Net sales Cost of goods sold Selling expenses...
-
You would like to know the thickness of a syrup film as itdrains at a rate of 1 gpm down a flat surface that is 6 in. wideand is inclined at an angle of 30 from the vertical. The syrup hasa viscosity...
-
a) A venturimeter is in an installation of 100 mm diameter pipe carrying water. The maximum range available in water-mercury differential pressure gauge is 50 cm of mercury deflection. Find the...
-
Suppose we write the following code (pseudo-code) on our shell terminal: int main(int argc, char *argv[]) { int p fork(); for (int i=0; i
-
Why are recessive sex-linked traits seen more often in males than in females?
-
When you carry shopping bags, rather than grasp the handles with your hand as in Figure Q8.14a, you might choose to put them over your arm and slide the handle toward your elbow as in Figure Q8.14b....
-
Use examples to describe how transgenic organisms are useful to humans.
-
A hippos body is 4.0 m long with front and rear feet located as in Figure P8.8. The hippo carries 60% of its weight on its front feet. How far from its tail is the hippos center of gravity? 0.5 m 1.8...
-
Male birds of many species have brighter feathers than females. Bright colors on males are often adaptations for winning mates, as in the case of birds of paradise and peacocks, discussed in this...
-
Mike is the Director of Human Resources for a 120-employee family-owned manufacturing firm. Mike has been quite busy the last year reforming the benefit offerings to comply with recent changes in...
-
A simple random sample of 220 university students were asked what pasta they usually order and with which sauce. The preferences of these respondents are summarised below: Sauce Bolognese Pasta...
-
Consider the diagram below, which is drawn under the assumption that the new Keynesian sticky-price theory of aggregate supply applies. Assume that at present, the economy is in long-run equilibrium...
-
In Ciudad Barrios, El Salvador, the latest payments from relatives working in the United States have finally arrived. When the credit unions open for business, up to 150 people are already waiting in...
-
Suppose that Congress enacts a significant tax cut with the expectation that this action will stimulate aggregate demand and push up real GDP in the short run. In fact, however, neither real GDP nor...
-
How would each of the following liabilities be classified (current, non-current, or both) at the end of the financial year? Unearned revenue Accrued expenses Provision for warranty repair costs...
-
The following were among transactions of Everluck Enterprises Ltd during the financial years ending 30 June 2023 and 30 June 2024. Required Record in general journal form all the above transactions,...
-
At 30 June 2024, the accountant for Woodbine Construction, Mary Ellam, is preparing the financial statements for the year ended on that date. To calculate the annual leave payable, the accountant had...
Study smarter with the SolutionInn App