A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address?

Firewalls provide protection by inspecting packet headers and application layer data and comparing what it finds with existing rules, which are either predefined or built-in defaults. When an IP address seems to be from the inside of a network and yet it is not, the firewall examines the port numbers from which the IP address is coming. The source and destination hosts have unique port numbers based on the destination or source of the IP address. It is critical to note that ephemeral port numbers are many and random, adding to the credibility of the source IP address.

Answer by Academic.tip's expert
An answer to this question is provided by one of our experts who specializes in technology & it. Let us know how much you liked it and give it a rating.

Cite this page

Select a citation style:

References

Academic.Tips. (2022) 'A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address'. 30 July.

Reference

Academic.Tips. (2022, July 30). A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address? https://academic.tips/question/a-stateful-firewall-can-tell-if-the-http-connection-is-starting-from-inside-the-network-by-looking-at-the-transport-layer-tcp-syn-synchronize-as-well-as-ip-address-source-what-should-it-do-if-someo/

References

Academic.Tips. 2022. "A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address?" July 30, 2022. https://academic.tips/question/a-stateful-firewall-can-tell-if-the-http-connection-is-starting-from-inside-the-network-by-looking-at-the-transport-layer-tcp-syn-synchronize-as-well-as-ip-address-source-what-should-it-do-if-someo/.

1. Academic.Tips. "A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address?" July 30, 2022. https://academic.tips/question/a-stateful-firewall-can-tell-if-the-http-connection-is-starting-from-inside-the-network-by-looking-at-the-transport-layer-tcp-syn-synchronize-as-well-as-ip-address-source-what-should-it-do-if-someo/.


Bibliography


Academic.Tips. "A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address?" July 30, 2022. https://academic.tips/question/a-stateful-firewall-can-tell-if-the-http-connection-is-starting-from-inside-the-network-by-looking-at-the-transport-layer-tcp-syn-synchronize-as-well-as-ip-address-source-what-should-it-do-if-someo/.

Work Cited

"A stateful firewall can tell if the HTTP connection is starting from inside the network by looking at the transport layer TCP SYN (synchronize) as well as IP address source. What should it do if someone from the outside is pretending to be an “interior” IP address?" Academic.Tips, 30 July 2022, academic.tips/question/a-stateful-firewall-can-tell-if-the-http-connection-is-starting-from-inside-the-network-by-looking-at-the-transport-layer-tcp-syn-synchronize-as-well-as-ip-address-source-what-should-it-do-if-someo/.

Copy