CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy,...
-
Upload
duongduong -
Category
Documents
-
view
215 -
download
0
Transcript of CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy,...
![Page 1: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/1.jpg)
![Page 2: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/2.jpg)
![Page 3: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/3.jpg)
![Page 4: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/4.jpg)
![Page 5: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/5.jpg)
![Page 6: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/6.jpg)
![Page 7: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/7.jpg)
![Page 8: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/8.jpg)
![Page 9: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/9.jpg)
![Page 10: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/10.jpg)
![Page 11: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/11.jpg)
192.168.0.10
192.168.0.11
192.168.0.12
130.245.27.2
![Page 12: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/12.jpg)
SSH server192.168.0.10:1234
130.245.27.2:22130.245.27.2:80
Web server192.168.0.10:80
![Page 13: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/13.jpg)
![Page 14: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/14.jpg)
![Page 15: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/15.jpg)
nc -l -p 12345 -c ‘nc blocked.com 80’
wget remote.edu:12345
ssh -L 12345:blocked.com:80 remote.edu
ssh -R 8080:localhost:80 remote.edu
![Page 16: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/16.jpg)
![Page 17: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/17.jpg)
ssh –D 12345 sshserver.com
chrome --proxy-server='socks://localhost:12345'
![Page 18: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/18.jpg)
![Page 19: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/19.jpg)
![Page 20: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/20.jpg)
![Page 21: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/21.jpg)
# flush all chainsiptables -Fiptables –X
# defaults for predefined chainsiptables -P INPUT DROPiptables -P OUTPUT DROPiptables -P FORWARD DROP
# allow anything on localhost interfaceiptables -A INPUT -i lo -j ACCEPTiptables -A OUTPUT -o lo -j ACCEPT
# allow all traffic from specific subnetsiptables -A INPUT -s 128.59.0.0/255.255.0.0 -j ACCEPTiptables -A INPUT -s 160.39.0.0/255.255.0.0 -j ACCEPT
![Page 22: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/22.jpg)
# allow all inbound traffic for specific servicesiptables -A INPUT -p tcp -m tcp --syn --dport 22 -j ACCEPTiptables -A INPUT -p tcp -m tcp --syn --dport 80 -j ACCEPT
# allow inbound established and related outside communicationiptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
# allow ICMPiptables -A INPUT -p icmp -j ACCEPT
# allow all outgoing trafficiptables -A OUTPUT -j ACCEPT
![Page 23: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/23.jpg)
![Page 24: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/24.jpg)
![Page 25: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/25.jpg)
![Page 26: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/26.jpg)
![Page 27: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/27.jpg)
![Page 28: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/28.jpg)
![Page 29: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/29.jpg)
![Page 30: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/30.jpg)
![Page 31: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/31.jpg)
![Page 32: CSE331 2017 - Firewalls and Gatewaysmikepo/CSE331/2017/lectures/CSE3… · A secure socks5 proxy, designed to protect your Internet traffic. download config spec about Try it now!](https://reader031.fdocuments.us/reader031/viewer/2022030300/5ba0642d09d3f2c2598cb474/html5/thumbnails/32.jpg)