Question: A hacker uses port 25 as the client port on his or her end to attempt to open a connection to your Web proxy server.

A hacker uses port 25 as the client port on his or her end to attempt to open a connection to your Web proxy server.

a. The following packets might be generated: Packet Direction 7 In 8 Out Sre Addr Dest Addr Protocol Src

Explain why this attack will succeed, using the ruleset of the preceding problem.

b. When a TCP connection is initiated, the ACK bit in the TCP header is not set.
Subsequently, all TCP headers sent over the TCP connection have the ACK bit set. Use this information to modify the ruleset of the preceding problem to prevent the attack just described.

Packet Direction 7 In 8 Out Sre Addr Dest Addr Protocol Src Port TCP TCP 10.1.2.3 172.16.3.4 172.16.3.4 10.1.2.3 25 8080 Dest Port 8080 25 Action ? ?

Step by Step Solution

★★★★★

3.34 Rating (157 Votes )

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock

a Packet 7 is admitted under rule ... View full answer

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related Cryptography And Network Security Questions!

Planning is one of the most important management functions in any business. A front office managers first step in planning should involve determine the departments goals. Planning also includes...

The Crazy Eddie fraud may appear smaller and gentler than the massive billion-dollar frauds exposed in recent times, such as Bernie Madoffs Ponzi scheme, frauds in the subprime mortgage market, the...

Sam Walton was born on March 29, 1918, in Kingfisher, Oklahoma, a small town 50 miles northwest of Oklahoma City. Sams father, a farmer, struggled to support his family during the Great Depression....

8. Say the ruleset described above is modified, with the new table as follows RuleDirection |Src addr Dest addr Protocol Src port Dest port Action Permit Permit Permit Permit 1023 25 1023 25 In...

A hacker uses port 2 5 as the client port on his or her end to attempt to open a connection to your Web proxy server. a ) The following packets might be generated: Will this attack succeed using the...

Your task is to develop a small web proxy server which is able to cache web pages. It is a very simple proxy server which only understands simple GET-requests, but is able to handle all kinds of...

9. (10 Points) SMTP (Simple Mail Transfer Protocol) is the standard protocol for transferring mail between hosts over TCP. A TCP connection is set up between a user agent and a server program. The...

You wish to build a packet-filter ruleset that allows certain inbound and outbound SMTP traffic to your hosts but blocks all other traffic. SMTP is the standard protocol for transferring mails over a...

I have to create a program in C and I can't figure it out. The program has to read a source file. Please help. /******************************************************************** PROJECT: Glossary...

Screen shot of the 4 panes you see when you run the dns.cap file in Wireshark. Question 4.3.1: In Packet No. 28, what is the Source Port of the UDP data? (Hint: What does UDP stand for?) Question...

If investors believe that others have superior information which they can take advantage of by copying theirs? trades, this can lead? to: A. a disposition effect. B. an informational cascade effect....

The National Sleep Foundation found that after surveying 450 adults, it was found that 71.1% were over 30, and that 46.1% of the adults snored. 41% of the respondents were snorers over the age of 30...

Critically evaluate how serious violations of PACE and the Codes of Practice have to be before evidence will be ruled out under section 78.

Hatch Inc.s common stock has a par value of $1 and a current market price of $15. Explain why these amounts are different. AppendixLO1

The Intel 8086 is a 16-bit processor similar in many ways to the 8-bit 8088. The 8086 uses a 16-bit bus that can transfer 2 bytes at a time, provided that the lower-order byte has an even address....

Consider a 32-bit microprocessor whose bus cycle is the same duration as that of a 16-bit microprocessor. Assume that, on average, 20% of the operands and instructions are 32 bits long, 40% are 16...

Draw and explain a timing diagram for a PCI write operation.

Why do overestimations of restructuring reserves sometimes cause gross margin percentages to suddenly change?

Fixed costs are $3,000,000 and the unit contribution margin is $150. What is the break- even point? (5 POINTS) 29

(Hands-on Exercise) Use Chromes Developer Tools to examine the components of the URI http://www.bbc.co.uk/news/technology-22199692 Use the Headers tab to examine the request headers source of the...