X=70

IP:203.45.70.1

If possible, can provide screenshot, or let me know if any information is missing

Task 7. Network Address Translation and Packet Filtering 1. Assume that your network is behind a NATted router that sits between the internal hosts and the larger Internet. The router's address on the Internet side has IP address 203.45.X.1. Note: X denotes the last two digits of your student ID. If your student ID is DMT2104123, the IP address is 203.45.23.1. If your student ID is SWE2104103, the IP address is 203.45.3.1. a) With the aid of a diagram, show the operations of network address translation (NAT) when your system sends/receives the IP datagram to/from the web server in Step 6 of Task 1. Whenever possible, use the parameters of your own internal network configuration in your description. You can use any suitable port number for the NATted router in this question. 2. Assume that the router in (1) is also configured with packet filtering function. Table 1 shows an example of the packet filtering configuration for the following policies: Prevent the host with the IP address 10.1.1.1 from connecting to the application on UDP port 5000. (Rule 1). Allow all outbound web connections for the host with the IP address 10.1.1.1 (Rule 2 and 3). Table 1 Action Protocol Rule No. 1 2 3 Source Address 10.1.1.1 10.1.1.1 Any Deny Allow Allow Destination Address Any Any 10.1.1.1 Source Port Any Any UDP TCP TCP Destination Flag Bit Port 5000 80 Any Any ACK 80 a) Provide the packet filtering rules based on the format as shown in Table 1 for the following policies. You may assume that the NAT function takes effect first for the inbound direction, while packet filtering function takes effect first for outbound direction. Note that the policies below do not specify the sequence of the rule, you may need to determine the sequence of the rule in the actual configuration. O Allow all outbound connections to a secure shell (SSH) server at the IP address 203.56.78.9. O Block all inbound connections from a host at the IP address of 123.4.5.6. o Prevent ICMP ping scanning