Configuring Access Control Lists on a Linux Based Firewalls

CompTIA Security+ (SY601) Domain
Domain 3.0: Implementation

CompTIA Security+ (SY601) Objectives
Objecting 3.8: Given a scenario, implement authentication and authorization protocols

Overview

This lab is part of a series of lab exercises intended to support courseware for Ethical Hacker training. The development of this document is funded by the Department of Labor (DOL) Trade Adjustment Assistance Community College and Career Training (TAACCCT) Grant No. TC-22525-11-60-A-48.

In this lab, students will set up the sniffer, enable services and configure firewall rules, and test those rules. 

OUTCOMES:

In this lab, you will learn to:

  1. Set up the network
  2. Enable services and configure firewall rules
  3. Test the firewall

You should be aware of the common terms that are relevant within the “Configuring Access Control Lists on a Linux-Based Firewalls” lab to successfully complete it.

Courses

Key terms and descriptions

Iptables
a command line tool that allows you to create firewall rules.
route add
This command allows you to add a default gateway on a Linux system.
netstat
This command will allow you to view active TCP and UDP connections.
NAT
Network Address Translation will allow internal hosts to reach the external network through a single IP address. Most firewalls can be configured to perform NAT.
nmap
The command will allow you to check for open TCP and UDP ports.