From the course: Wireshark: Malware and Forensics

Unlock the full course today

Join today to access over 22,500 courses taught by industry experts or purchase this course individually.

Create firewall rules

Create firewall rules - Wireshark Tutorial

From the course: Wireshark: Malware and Forensics

Start my 1-month free trial

Create firewall rules

- [Narrator] On a network, the router examines packets as data passes through the network and determines the destination based on network layer addressing information. In addition to routing traffic, a router uses an access control list or ACL to deny or permit traffic on a network. When a router receives a packet, it examines the field values and refers to the access control list. The router drops the packet if deny characteristics match. The router will forward packets if permit characteristics match. If the packet does not match any criteria given, the router drops the packet into the bit bucket, which is the implicit deny or clean-up rule. Each router interface has a separate access control list. There are different access control lists for inbound and outbound traffic. There is a wide range of packet filtering options. Common options include source and destination IP address, source and destination ports, flags set in the TCP header, UDP or certain ICMP packets, and specific…

Contents