Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 78)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 78

ThepossiblestatusesoftheFirewall1Daemonare:

n INSTALLED,meaningthedaemonisrunningandthatthesecuritypolicyis

installed

n NOTINSTALLED,meaningthedaemonisrunning,butthenthesecuritypolicy

isnotinstalled

n DISCONNECTED,meaningthereisnoresponsefromthedaemonatall.Most

likelythedaemonhascrashed.

6,

Configurerouting.SinceNAToccursAFTERinternalrouting(andBEFORE

transmission),wemustmanuallysetuptherequiredpersistentroutestoensurethat

NATcanbecorrectlyperformed.

ForWWW,thecommandtouseinNT’sCommandPromptis:

routeadd–p192.168.7.8192.168.8.3

ForDNS,thecommandtouseinNT’sCommandPromptis:

routeadd–p192.168.7.9192.168.8.4

ForEmail,thecommandtouseinNT’sCommandPromptis:

routeadd–p192.168.7.10192.168.8.5

The–pswitchensuresthattheseentriescansurviverebootsbyhavingthemstoredas

persistententries.

7,

Performsomebasictesting:

TotesttheHTTP/HTTPSrule,dothefollowing:

n DeliberatelysetuptelnetandFTPservicestorunontheWWWserver.Fromthe

outside,connecttoWWWviaFTPandTelnet.Theconnectionrequestsshould

fail.

n Fromtheoutside,connecttoWWWviaHTTPandHTTPS.Theconnection

requestsshouldsucceed.

1 2 ... 73 74 75 76 77 78 79 80 81 82 83 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 78