ITE 476 Firewall Advanced Ruleset Questions

use the advanced firewalls sheet for the questions

A user on the Public PC tries to SSH into the Router/Firewall. There are no other SSH connections in progress.

Accepted with rules 7, 63, 48, 8, and 66

A user on the Private PC attempts to open a web page from the web server running on the Firewall-Router.

Accepted with rules 7 and 63, logged with rule 53, then default policy DROP on the OUTPUT chain

What happens when Private PC attempts to request a DHCP address (UDP/67) from the DHCP server running on the Firewall?

Accepted with rules 10 and 37

What happens if a user on the FIREWALL tries to access a SSH (TCP/22) server on Public PC?

Logged with rule 53 then default policy DROP on the OUTPUT chain

What happens when a user on the Public PC tries to ping the Firewall-Router?  Assume the ICMP packet is not fragmented.

Accepted with rules 6, 60, logged with rule 53, then default policy DROP on the OUTPUT chain

What happens if the administrator tries to access the SSH (TCP/22) service using the FIREWALL via LOCALHOST?  Assume there are no other SSH connections.

Accepted with rules 36, 7, 63, 8 and 66

What happens if a user on the Firewall attempts to open a web page (HTTPS 443) from a web server running on Public PC?

Accepted with rules 40 and 13

What happens if a user on the Public PC tries to use the remote desktop protocol RDP (TCP/3389) to connect to a computer on Private network using a Reverse SSH tunnel initiated by the Private PC?

Accepted with rules 33 and 34

What happens if a private user tries to access the POP3 (TCP/110) mail server on Public PC?

Accepted with rules 33 and 34

What happens if the administrator tries to access his personal email IMAP SSL (TCP/993) located on the Internet while working on the firewall?

Logged with rule 53 then default policy DROP on the OUTPUT chain