Free Redacted Document - District Court of Delaware - Delaware

Case 1:04-cv-01199-SLR Document 318-14 Filed 06/23/2006 Page 1 014

Case 1:04-cv-01199-SLR Document 318-14 Filed 06/23/2006 Page 2 014
Cempmezj Securw 6-if
— 4
I A we 6*
Q3 ¢'•
·¤v Qt,
Q? f
6· \9
4*
.0 4
I °‘~·
0
A ¢*
~1-- ~··· ‘*‘‘-= s "
|
@
*2;,,
’{’
~$g_ E? aw e 4 ea}, »- ·- MM-- @9 <“ · ·”·§=¤·~· * . ‘r~ an
;é=5¥*?# * - 2 =-. ¥ ‘ -# 4 · -

-e1· ` `-= »
l
~ ., ·· ’ .1:5**- ’“"t—*~“- ’-
""““""’$& · _ I 2: *7 * · ~ * · ` · - e - wa i u i
‘ · " 1 yliiiigi ¥§§\1§it1il§i}i€%¥ii?E¢1·i**‘i3"‘l’€"i1§`*`*l
3 gg/gw)
1 ji? ``“`` 4;.1- 0 1**1111 C3
_ -··.,:¤i¤l\li§$¥m;* iii? i€?’?’.iq¢
I U O
I · . W2? F”“» ‘=;1’ E G
~. I . · .11 • . » . ·
‘·‘s`n- ‘ wi { ' F > . in I "· ;€=~·
C'.} ·
._j q _ ‘f‘§gjj-;_;5j;·`i.!1s.Eg".:;LA1N_;/ g"=:» {wa },f_;,;.A:f
I A UTS}; $1111 O
= F *1 G gg F? ·=>
_ 3 af *. __ -< __ '· ; _‘$Q.i?ii
Ez " 1- Q ‘ Q _
‘-¤ ‘· - ** ; ~ *1--* i‘e1§’i%_?i; T .§¥*T·‘ii
Z 2**;: [QE - ·· G $@1
Q6 |’*e ig ‘¤z%®1=¤&;=%-2@*2;-ez1
{J 1 O
Q ‘ M ig ° *!i?i?£§, '%!ZT€.Li;·¥§*'°*r"E§ .;z=*F{ = 5%;.
, . , ·•». HI ;k{.l1 . O jg
- — 2 ki ’*§j;h ‘*;l`Q’. Tgiiié ,.»1a’.§,.“i. ,¥|. i:.§€:¥2?§
E , as Q {gw ` ix =%§"!E =v‘*" ,*1
I ‘ C} jig —-J , W.? Egzi ‘,;,»?ss;E‘i?`
_ : -6 · 1 2;;;,; ..$.. fh-·¤* “T ;~~§? C} iriiéfi
4 1 < ; w u ~ »J\= .a-, ,, ·:;=;;¤4
. Ji ·¥§£§,;;1,i.$.=· u¤~** · O 1 __;,¤g»\v;;1;
*!;; ig=g§;];5=4i31;Fj;g;;;’;gE;;;g
3 ‘ -. ‘*·—— _j /‘ , 2 ggwgiigil;F_¤a»s·`i·§eg1I%¥;1:·¤§g;l5»g·i;¤;y·r‘ag; -
1 6 iésif 6 ;.»-r<»#· *11,é;i%=;a¥;2¤;.#1i;.s!lE.;:1
sujyi Z`; 74 r` , 'l‘¤l;¤ig‘E?i?;`%iw?}
4- * kh} -°`- m_ A,.,,W,L_ ‘·i”‘tj&L.i§i¢;;i;-*
·`‘ ‘ `‘ - » -2 N Yiai .· -· ··— ·· 5.. " ·· - , —‘
· ` Td"'““ -· - · » wv
__ H. wg};. ;;_;1_]E=_I,
; N ® ,
I O Szmsomz Gmfwz/eel and Gene Spaford
SYM__P__O49307O

Case 1 :04-cv-01 199-SLR Document 318-14 Filed 06/23/2006 Page 3 of 4
I
I _ SEREIIIIII EIIIHIIII
I I-I I-gg
I3 I-:
I I 5* ga
"'Â¥ I-I I
I (QD E.
I I-I EL I
I In Cj
('D
I Q E
I g. t><
I ~<: $29
I SC? I
I
Qc .
»‘é’
I
I OIREILLYS
| I
K
I SYD./I*_I’M[}49BD7'E

Case 1:04-cv-01199-SLR Document 318-14 Filed 06/23/2006 Page 4 of 4
I 640 Cinzpier 21; Firewalls
I Anatomy of cz Firewall
Fundmnenteliy, all ftreweils consist of th following two kinds of components;
. ·zZ%okes
l Computer or communications devices that restrict the free Bow of packets
between networks. Chokes are often iruplemented with routers, but they do
not have to be. The use of the word "choke” is taken from the field of e1ec—
I rronicsz a choke is a device that exhibits great resistance to certain types of
signals, but not to others.
I Gates
Specialiy designated programs, devices, or computers within the firewalfs
perimeter that receive connections from ezvitemai networks and hzmdie them
I epproprieteiy. Other texts on Fmewails sometimes refer to single mechmes that
hzmciie all gate functions as bastion hosts.
Ideally, users shouid not have accounts on a gate computer. This restriction
\ helps improve the computefs reliability and users’ security.
On the gatetfs), you may nm one or more of the following kinds of programs;
I ‘ Nezwork client sojware _
Client software includes programs such as telnet fgp and mosezzisz One of
the simplest ways to give users limited access to the Internet is to ailow
I them to iog onto the gate machine and show there to ram network client
software direcztiy. This technique has the disadvantage that you must
either create user accounts oe the gate computer, or you must have users
I share 2 single account-
Pmacjy sewer
I A proxy is :1 program that poses as another. In the case of a firewei}, 2
proxy is a program that forwards a request through your firewall, from
the internal network to the external one.
I Nezwork servers
You can also run network servers on your gave. For example, you might
want to mr; an SMTP server much es sendmczil or smup so that you can
I receive electronic mail. (If you wish to mn an HTTP server to pubiish
informatiorr on the Worid Wide Web, that server shouid be rum on e sepw
I rate computer, and not on your gate.) _
Many neséwork servers can also function as proxies. They can do so because the?
implement simpke storearrd-forvwerd models, allowing them to forward queries or
I "‘ The first edition of this book introduced this temunology as part of one of the {irs: written descaipiivm
of firewalis. Ahhough not everyone in the community has adopted these terms, we beiieve that they ¤f€
I at least as descriptive as other terms invented since.
I 4.._. ri
I SYM_P__U498228