We have an internal webserver, used only for testing purposes, at IP address 5.6.7.8 on our internal corporate network. The packet filter is situated at a chokepoint between our internal network and the rest of the Internet. Can such a packet filter block all attempts by outside hosts to initiate a direct TCP connection to this internal webserver? If yes, design suitable packet filter rule sets (similar to those shown in the table below) that provides this functionality; if no, explain why a (stateless) packet filter cannot do it.

Table: Packet-Filtering Examples Rule, Direction, Src address, Dest addresss, Protocol, Dest port, Action 1, In, External, Internal, TCP, 25, Permit 2, Out, Internal, External, TCP, >1023, Permit 3, Out, Internal, External, TCP, 25, Permit 4, In, External, Internal, TCP, >1023, Permit 5, Either, Any, Any, Any, Any, Deny