Destination IP Address Server Port Number Action on Connection Remark Source IP Rule Address Open access to this webserver. 1Any 60.3.47.138 80 Allow Open access to any webserver 2Any ANY 80 Allow Authenti- Open access for internal cate, then hosts to this webserver 3 Any Internal 60.1.232.89 80 allow following authentication 4 Finance Finance Any Authenti- Any connection between cate, then Finance hosts with allow authentication 5 Any Internal 60.44.2.17. 25 Allow Open access for internal hosts to this mail server 6 Any Any Any Deny Deny any connection not permitted by a previous rule. FIGURE 4-18 Access Control List (ACL) for a Stateful Inspection Firewall to Apply to Packets Attempting to Create a Connection