Module 3 – Assignment 2 Page 1 of 3
CS 482: Selected Topics in Information Security
Spring 2005 – Section 1
Module 4 Assignment: Shorewall
I. Firewall
One way to test a firewall for durability and vulnerabilities is to make sure it denies or
allows access to certain resources on different computers from different external or
internal sources.
In our configuration of the Shorewall firewall we setup the basic policy for the network
and we defined rules (or exceptions to the policy).
Deliverable
For each of the following test you are to submit the policy and rules file, the results of
the test, how your team implemented the requirement, and any problems that you
encountered during the configuration. State whether or not your team had to
implement the rule unidirectional or bidirectional, in order words were you able to test
the rule going one way or did you have to insert the rules that went in the other
direction as well.
Note: Pinging from the computer that you have denied or allowed access to or from is
not a sufficient test, you must also show if other machines can access the same
resource.
Figure 1: Simplified diagram of the business network
Red Zone
FW
Green Zone
DMZ
