Download Slide 1

Document related concepts

IEEE 802.1aq wikipedia , lookup

Net neutrality law wikipedia , lookup

RapidIO wikipedia , lookup

Network tap wikipedia , lookup

Internet protocol suite wikipedia , lookup

Lag wikipedia , lookup

Wireless security wikipedia , lookup

AppleTalk wikipedia , lookup

Zero-configuration networking wikipedia , lookup

IEEE 1355 wikipedia , lookup

Net bias wikipedia , lookup

Computer network wikipedia , lookup

Airborne Networking wikipedia , lookup

Peering wikipedia , lookup

List of wireless community networks by region wikipedia , lookup

Recursive InterNetwork Architecture (RINA) wikipedia , lookup

Multiprotocol Label Switching wikipedia , lookup

Deep packet inspection wikipedia , lookup

Piggybacking (Internet access) wikipedia , lookup

Wake-on-LAN wikipedia , lookup

Distributed firewall wikipedia , lookup

Cracking of wireless networks wikipedia , lookup

Routing in delay-tolerant networking wikipedia , lookup

Routing wikipedia , lookup

Transcript
30.18 Stateful Firewalls
Recall that basic packet filters are stateless. They treat each IP
datagram separately and keep no record of datagrams received.
Stateful firewalls watch outgoing requests and adapt the filter
rules to accommodate the replies.
Example:
Internal client sends TCP connection request to external WWW server.
Stateful firewall records this as the two endpoints of the requested
connection:
( IPsource, Portsource, IPdest, 80 )
When the server returns a connection accept the firewall will recognize
this as a response to the request, and forward it to the client.
This is additional to the packet filter, so actions can
still be prohibited, as determined by the administrator.
11