Test Suka² 3

Possible actions of ip firewall filter are:

• Tarpit

• log

• accept

• tarp

• add-to-list

Which firewall chain should you use to filter ICMP packets from the router it self?

• output

• input

• prerouting

• forward

Which firewall chain should you use to filter clients HTTP traffic going through the router?

• input

• forward

• output

• prerouting

Action=redirect allows you to make

• A transparent DNS cache

• A transparent HTTP Proxy

• Enable a local service

• Forward DNS requests to another device

Destination NAT (chain dstnat, action dst-nat) can be used to:

• Change destination port

• Direct users from the Internet to a server within your local network

• Change source port

• Hide your local network from the Internet

What is the correct action to be specified in the NAT rule to hide a private network when communicating to the outside world?

• masquerade

• allow

• passthrough

• tarpit

What is the correct action for a NAT rule on a router that should intercept SMTP traffic and send it over to a specified mail server?

• tarpit

• dst-nat

• passthrough

• redirect

It is required to make a web server on a private LAN visible on the Public Internet. Only the web server port should be visible to the public. Which of the following configuration steps must be met. (select all that apply)

• Public IP address of the webserver must be installed on the NAT Router

• A route between the NAT Router and the webserver must exist

• Connection Tracking must be enabled on NAT router

• in ip firewall NAT there should be a dst-nat between the public ip of the router and the private ip of the webserver

• LAN address of the webserver should be routable on the internet

What is marked by connection-state=established matcher?

• Packet begins a new TCP connection

• Packet does not correspond to any known connection

• Packet belongs to an existing connection,for example a reply packet or a packet which belongs to already replied connection

• Packet is related to, but not part of an existing connection

The highest queue priority is

• 5

• 1

• 8

• 3