2012

NETWORK SECURITY
Prof:
1. 2. 3. 4. 5.

Muhammad Mustafa Hassan

Enable IP Forwarding. Set First Three Chains on Drop. Allow Our Network To Communicate With Internet (IP Based). Allow Traffic on Port 80. Some Commands & Explanations.

Yasir Buland Khan 11328 2/23/2012

1. IP forwarding enable.

First of all we use the command of su and by using this command we switch the user. After that in next command we are finding the value in the ip_forward file. In next command we are changing the value in that file. After the changing we are checking that the value is changed or not.

2. Set first three chains on Drop.

First of all we are watching the list of iptables by using the command after that we are setting the of policies on drop. After that we apply flush on iptable that delete all the rules and finally we see the detail of iptable that shows that the policy is drop and there is no rule exists in any chain. ch 2|P age Yasir Buland Khan

3. Allow our network to communicate with internet (IP Based)

In the first command we are adding rule in forward chain that the source address of 192.168.10.100 can forward data to anywhere and this rule is accepted. In the next command we are adding the rule in forward chain that the destination IP 192.168.10.100 can receive data from anywhere.

4. Allow traffic on port 80.

In the first command we are adding rule in input chain that allow traffic from any where that is coming for port number 80. In second command we are adding rule in output chain that that allow second traffic to send anywhere. 3|P age Yasir Buland Khan

5. Rules.

In this command it is define that add rule in input chain that allow packets that have 74.125.236.112 IP address in the source address.

In this command it is define that add rule in input chain that allow packets that have 74.125.236.113 IP address in the source address.

4|Page

Yasir Buland Khan

In this command it is define that add rule in output chain that allow packets to transmit that have 74.125.236.112 IP address in the destination address.

In this command it is define that add rule in output chain that allow packets to transmit that have 74.125.236.113 IP address in the destination address.

5|Page

Yasir Buland Khan

In this command it is define that add rule in forward chain that allow packets to transmit that have 192.168.0.15 IP address in source IP address and 74.125.236.112 in destination IP address. These packets will be transmitted from 192.168.0.15 IP to 74.125.236.112 IP address.

In this command it is define that add rule in forward chain that allow packets to transmit that have 74.125.236.112 IP address in source IP address and 192.168.0.15 in destination IP address. These packets will be transmitted from 74.125.236.112 IP to 192.168.0.15 IP address.

6|Page

Yasir Buland Khan