2. Firewall (18 points) SMTP (Simple Mail Transfer Protocol) is the standard protocol for transferring mail between hosts over TCP. A TCP connection is set up between a user agent and a server program. The server listens on TCP port 25 for incoming connection requests. The user end of the connection is on a TCP port number above 1023. Suppose you wish to build a packet filter rule set allowing inbound and outbound SMTP traffic. You generate the following rule set: Protocol TCP TCP TCP TCP Any Rule Direction In Out Out In Either Src Addr External Internal Internal External Dest Addr Internal External External Internal Dest Port 25 1023 25 1023 Action Permit Permit Permit Permit Deny a. Describe the effect of each rule b. Your host in this example has IP address 172.16.1.1. Someone tries to send e-mail from a remote host with IP address 192.168.3.4. If successful, this generates an SMTP dialogue between the remote user and the SMTP server on your host consisting of SMTP commands and mail. Additionally, assume that a user on your host tries to send e-mail to the SMTP server on the remote system. Four typical packets for this scenario are as shown below. Indicate which packets are permitted or denied and which rule is used in each case Packet Direction Src Addr 192.168.3.4 172.16.1.1 172.16.1.1 192.168.3.4 Dest Addr Protoco Dest PortAction 172.16.1.1 192.168.3.4 192.168.3.4 172.16.1.1 Out TCP 25 1357 Out c. Someone from the outside world attempts to open a connection from port 5150 on a remote host (10.1.2.3) to the Web proxy server on port 8080 on one of your local hosts (172.16.3.4) in order to carry out an attack. Typical packets are as below. Will the attack succeed? Provide your explanations. PacketDirection Sre Addr 0.1.2.3 172.16.3.4 Dest Addr Protoco Dest PortAction 172.16.3.4 10.1.2.3 Out 5150