about firewall and networking in general

qrange · 05-30-2011, 04:02 AM

I cannot understand, why do we have to define both Source/Destination AND Direction when building firewall.
Isn't direction= source->destination?

what would happen if source and destination were swapped?

tg0000 · 05-30-2011, 05:39 AM

Quote:

Originally Posted by qrange

I cannot understand, why do we have to define both Source/Destination AND Direction when building firewall.
Isn't direction= source->destination?

what would happen if source and destination were swapped?

Sometimes a visual example will help. Try this one on for size :-)

tg0000 · 05-30-2011, 05:45 AM

Symantec also has some decent information on the subject.

qrange · 05-30-2011, 06:39 AM

thanks.
would 'source' and 'destination' have something to do with who initializes connection (by sending the first packet) and who sends ack?