1. Revise the access control list (ACL) in Figure 4-18 (page 138 in the textbook) to permit access to an FTP server with IP address 60.25.94.110.
2. How will the ACL in Figure 4-18 (page 138 in the textbook) handle a packet that attempts to open a connection to an FTP server without the additional rule added in question #4? Explain how the attempt will traverse the ACL and the resulting connection request response.

If a packet atteniPtS in its access control list (ACL). ACL rules spe Figure 4-18 shows a simple SPI firewall A An access control list (ACLl is a set of rules for determining what to do with arriving There are six columns. The fourth brings up something you saw in Chapter e server port number. For webservers, the well-known port number is 80. For ma Thy ts 29.in this figure, the company that uses this ACL respects well-known port nube the server Serve port numbers usually specify the application involved in the connecti serv ule allows any device to open a connection to a particular web adress 60.44.2.17, server port num ber 80). This might be the company's i webserver The second rule allows any device to open a connection to any webserver T webservers they have but realize that blocking access to a legitimate webseru is a lazy rule that some firewall administrators use when they do not know wha et will cause problems. Action on Connection Remark Allow Source IP Destination IP Address Server Port Number 80 Rule Address Any Open access to this webserver 60.3.47.138 An ANY 80 Allow Open access to any webserver 3 Any Internal 60.1.232.89 Authenti Open access for internal 80 cate, thenhosts to this webserver allow following authentication. 4 Finance Finance An Authenti Any connection between cate, then Finance hosts with allow authentication 5 Any Internal 60.44.2.17 25 Allow Open access for internal hosts to this mail server 6 Ar ny ny Deny any connection not permitted by a previous rule. FIGURE 4-18 Access Control List (ACU) for a Stateful Inspection Firewall to Apply to Packets Attempting to Create a Connection