Building a simple Firewall on the client machine and answer every question below:$(2$ Marks

$)$

$1-$Change the Default Chain Policies to Drop

$$ Why is it advisable to change the default chain policies to "Drop" in a

firewall configuration?

$$ What potential security risks are mitigated by setting default policies to

"Drop" instead of "Accept"?

$2-$ Allow forwarding of TCP traffic on IP interface $10\mathrm{.}0\mathrm{.}1\mathrm{.}2($client$)$ port $80$

$($HTTP$)$ and port $443($HTTPS$)$ to go to $192\mathrm{.}168\mathrm{.}23\mathrm{.}10$

$$ Explain the significance of allowing TCP traffic on ports $80$ and $443$ for a

client machine.

$$ How does this rule contribute to securing web traffic for the client?

$3-$ block a specific ip$-$address from reaching organization.

$$ What scenarios might warrant blocking a specific IP address in a firewall

configuration?

$$ How can blocking a specific IP address contribute to network security?

$4-$ Allow Incoming HTTP and HTTPS

$$ Why is it important to explicitly allow incoming HTTP and HTTPS traffic in

a firewall configuration?

$$ In what situations might blocking incoming HTTP and HTTPS be necessary

for security reasons?

$5-$ Allow outbound DNS$.$

$$ Discuss the reasons for allowing outbound DNS traffic in a firewall

configuration.

$$ How might blocking outbound DNS impact the normal operation of the client

machine?