a) For stateful packet inspection firewalls, what do ingress ACLs permit in general?
b) What do egress ACLs disallow in general in SPI firewalls?
c) What do well-known port numbers designate?
d) Is Figure 6-10 an ACL for ingress filtering or egress filtering?
e) Why is Rule 2 in Figure 6-10 safer than Rule 1?
f) Which rule in the ACL in Figure 6-10 represents the default behavior of SPI firewalls for ingress connection-opening attempts?