Linking Chains - A methodology for developing rules for IP Chains
by
Daniel Bradley
,
Eric Faccer
,
Mark Cross
Add To MetaCart
Abstract:
This paper describes a methodology for configuring a packet filter, which is one of the components of a firewall system. It takes into consideration non-obvious security nuances of the TCP/IP protocol stack that may be overlooked by system administrators. The methodology uses the TCP/IP protocol suite' s layered architecture as the guide for the composition of the packet filter rule set. It uses the IP Chains packet filter to demonstrate a practical example.

