RFC 2196:Site Security Handbook
RFC-Ref

IP


Click on the red underlined text to get to the source

... packets, the following criteria can be important when implementing a filtering policy: source and destination IP address, source and destination TCP port ...
... ability to create filters based on IP header options and the fragment state ...
... routers. This setup allows the external router to block off any attempts to use the underlying IP layer to break security (IP spoofing ...
... router to block off any attempts to use the underlying IP layer to break security (IP spoofing, source routing, packet ...
... of a firewall (commercial or homegrown) requires a significant amount of skill and knowledge of TCP/IP. Both types require regular maintenance, installation of software patches and updates, and regular monitoring. When budgeting for a firewall ...
... As an aside, building a "home grown" firewall requires a significant amount of skill and knowledge of TCP/IP. It should not be trivially attempted because a perceived sense of security is worse in the long ...


... network. This increases the risk of attacks via techniques such as IP address spoofing, packet sniffing, etc. Users and site management ...


... remote system, including host names, IP addresses and (perhaps) user IDs ...


... S. Bellovin, "Security Problems in the TCP/IP Protocol Suite", Computer Communication Review, Vol 19, 2, pp. 32-48, April 1989. ...
... B. Chapman, "Network(In) Security Through IP Packet Filtering", USENIX: Proceedings of the Third UNIX Security ...



Google
Web
RFC-Ref