The learning objective of this lab is two-fold: learning
how firewalls work, and setting up a simple firewall
for a network. Students will first
implement a simple stateless packet-filtering firewall,
which inspects packets, and decides
whether to drop or forward a packet based on firewall rules.
Through this implementation task, students can get the
basic ideas on how firewall works.
Linux already has a built-in firewall, also based on netfilter. This firewall is called iptables. Students will be given a simple network topology, and are asked to use iptables to set up firewall rules to protect the network. Students will also be exposed to several other interesting applications of iptables.
| Please give us your feedback on this lab using this feedback form. | |
| The SEED Labs project is open source. If you are interested in contributing to this project, please check out our Github page: https://github.com/seed-labs/seed-labs. |