Stateless Firewall

This lab will explore firewalls in the IT environment by testing the defenses of a server, setup and configure a stateless firewall and retesting the server’s defenses against an attack.  

outcomes:

In this lab, you will learn to: 

  1. Attack a server with a DoS attack.
  2. Set up and configure a stateless firewall.
  3. Test the defenses against a DoS attack.

videos:

Executing a UDP Flood Attack

Adding a Stateless Firewall

Verifying the Ruleset

Overview

Some of the first firewalls were only equipped with stateless rulesets. The rules within these rulesets are equivalent to basic Access Control Entries (ACEs) within an Access Control List (ACL) and do not retain the state for a given flow. In this lab, we will create a stateless firewall ruleset and demonstrate how it can be used to thwart an attack.

image001.png

Stateless Firewall

Key terms and descriptions

Denial of service
A common cyber-attack is a denial-of-service attack (DoS attack) that makes a machine or network resource unavailable temporarily or indefinitely disrupting services on a machine connected to a network.
Firewall
A firewall has a list of rules that it follows to allow traffic in or to reject traffic that does meet its criteria.
VyOS
VyOS is an open-source firewall/router.