What will happen when it is processed by the firewall filter shown in the exhibit?

firewall {
filter select-telnet {
term 1 {
from {
source-address {
10.0.0.0/8;

}
}
then log;
}
term 2 {
from {
protocoltcp;
port telnet;
}
then {
syslog;
reject;
}
}
term 3 {
from {
source-address {
10.1.1.1/32;
}
protocoltcp;
port telnet;
}
then {
sample;
accept;
}
}

}
}

A Telnet session is initiated from host 10.1.1.1.
What will happen when it is processed by the firewall filter shown in the exhibit?

firewall {
filter select-telnet {
term 1 {
from {
source-address {
10.0.0.0/8;

}
}
then log;
}
term 2 {
from {
protocoltcp;
port telnet;
}
then {
syslog;
reject;
}
}
term 3 {
from {
source-address {
10.1.1.1/32;
}
protocoltcp;
port telnet;
}
then {
sample;
accept;
}
}

}
}

A Telnet session is initiated from host 10.1.1.1.
What will happen when it is processed by the firewall filter shown in the exhibit?

A.
The packet will be accepted and logged.

B.
The packet will be discarded and logged.

C.
The packet will be rejected and a syslog message generated.

D.
The packet will be accepted and sampled.



Leave a Reply 2

Your email address will not be published. Required fields are marked *


Feras

Feras

please why the packet accepted and logged ?

appreciate any help!!

Salim

Salim

Hi Feras,
the packet will be accepted and logged because the packet matches the first term in firewall filter which is ‘term1’, if you see the action to be taken here is an action modifier which is ‘log’, knowing the default behavior of action modifier is to accept and log .