Security 13-29Firewall tutorialGeneral firewall termsFilter rule: A filter set is comprised of individual filter rules.Filter set: A grouping of individual filter rules.Firewall: A component or set of components that restrict access between a protected network and the Internet,or between two networks.Host: A workstation on the network.Packet: Unit of communication on the Internet.Packet filter: Packet filters allow or deny packets based on source or destination IP addresses, TCP or UDPports, or the TCP ACK bit.Port: A number that defines a particular type of service.Basic IP packet componentsAll IP packets contain the same basic header information, as follows:This header information is what the packet filter uses to make filtering decisions. It is important to note that apacket filter does not look into the IP data stream (the User Data from above) to make filtering decisions.Basic protocol typesTCP: Transmission Control Protocol. TCP provides reliable packet delivery and has a retransmissionmechanism (so packets are not lost). RFC 793 is the specification for TCP.UDP: User Datagram Protocol. Unlike TCP, UDP does not guarantee reliable, sequenced packet delivery. If datadoes not reach its destination, UDP does not retransmit the data. RFC 768 is the specification for UDP.There are many more ports defined in the Assigned Addresses RFC. The table that follows shows some of theseport assignments.Source IP Address 163.176.132.18Destination IP Address 163.176.4.27Source Port 2541Destination Port 80Protocol TCPACK Bit YesDATA User Data
