
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 74
Theoption“ApplyGatewayRulestoInterfaceDirection”isrelatedtotheconceptof
interfacedirection,whichspecifiesthecommunicationdirectioninwhicharuleis
enforced.WiththisoptionsettoInbound,securitypolicyisenforcedonlyonpackets
enteringtheobject.WiththisoptionsettoOutbound,policyisenforcedonlyon
packetsleavingtheobject.WithEitherbound,policyisenforcedbothways.We
shouldstickwithInbound,astheoverheadimposedbyEitherboundistoohigh.
2,
EnabletheSynDefenderGatewaytoprotectagainstpotential Synfloodattacks. A
detaileddescriptionoftheSynDefenderoptionsisavailableat
http://www.phoneboy.com/faq/0137.html.Inshort,withtheSynDefenderGateway
optionon,FireWall1willtrackthestateofthehandshakingprocessandwillreset
"invalid"connectionattemptsasnecessary.
Kommentare zu diesen Handbüchern