Procedures: 1. Install services on your JagCloud instance. sudo apt-get install slapd ldap-utils apache2 samba rsh-server bind9 ntp 2. Scan your JagCloud instance prior to configuring the firewall. a. Establish a VPN connection to JagCloud. b. Using the private key and password provided for the scanner, log into the scanner in JagCloud. The IP address for the scanner is 172.17.128.4. c. Scan your JagCloud instance with nmap. Use the command below, but replace the X in the last octet of the IP with the last octet of your instance. nmap 10.128.0.X d. Repeat the scan above, but write the output to a file. user@host:~$ echo First scan, before FW >> lastname-lab2- results.txt nmap 10.128.0.X >> lastname-lab2-results.txt 3. Configure the firewall. a. Configure firewall rules that implements the ports and protocol policies shown in the table below, using the minimum number of firewall rules required. Do not delete any existing firewall rules. b. Block all ingress ports and protocols not specifically authorized, and allow all egress ports and protocols not specifically blocked. c. Use the following convention to name firewall rules: lastnamefirstinital-title For example, bartonk-block-icmp-reply d. Scan your JagCloud instance again and report write the results to a file. Detect and correct discrepancies. nmap 10.128.0.X >> lastname-lab2-results.txt user@host:~$ echo >> lastname-lab2-results.txt user@host:~$ echo Second scan, after FW >> lastname-lab2- results.txt nmap 10.128.0.X >> lastname-lab2-results.txt Protocol/Port Allow VPN Block Any Allow 172.20.0.0/24 Protocol Protocol/Port Ingress Egress Echo Request Echo Reply HTTP rsh/512 rsh/513 rsh/514 samba Bind9 ldap SSH NTP Table 3, Ports & Protocols 4. Capture traffic at your JagCloud instance. a. Capture traffic from the scanner with the command (on your instance) and write them to a file: sudo tcpdump src 172.17.128.4 -w tcmpdump.pcap b. Stop the tcpdump capture with the CTRL C. c. Read the tcpdump capture with the command: sudo tcpdump -r tcmpdump.pcap 5. Copy tcpdump.pcap and lastname-lab2-results.txt from both instances. Submit both files.