Firewall rules

Following is a set of rules on a firewall:

1. deny tcp 10.1.10.10/25 any

2. accept udp any 192.168.10.0/24

3. deny tcp 10.1.10.192/25 any

4. deny udp 172.16.10.0/16 192.168.10.0/24

5. accept tcp 10.1.10.0/24 any

6. deny udp 10.1.10.0/24 192.168.0.0/16

7. accept udp 172.16.10.0/16 any

4.1. What is shadowing regarding firewall inconsistency? Does it exist in the rules above? If so,

where is it?

4.2. What is generalization regarding firewall inconsistency? Does it exist in the rules above? If so,

where is it?

4.3. What is correlation regarding firewall inconsistency? Does it exist in the rules above? If so,

where is it?

Note: 10.1.10.10/25 is a subnet of 10.1.10.0/24, 192.168.10.0/24 is a subnet of 192.168.0.0/16