网络安全理论与技术09—防火墙研究报告.ppt

* Table 9.1, from the text gives some examples of packet filtering rule sets. In each set, the rules are applied top to bottom. The * in a field is a wildcard designator that matches everything. We assume that the default = discard policy is in force. A. Inbound mail is allowed (port 25 is for SMTP incoming), but only to a gateway host. However, packets from a particular external host, SPIGOT, are blocked. B. This is an explicit statement of the default policy, usually implicitly the last rule. C. This rule set is intended to specify that any inside host can send mail to the outside. A TCP pac