Ingress Filtering Lab

Firewall Rule Evaluation

Watch how a Stateful Firewall inspects packet headers and applies a Default Deny policy.

FW_POLICY_v4.2

PRIO	SERVICE	PORT	ACTION
10	HTTP	80	ALLOW
20	HTTPS	443	ALLOW
30	SSH	22	DENY
99	ANY	*	DENY

* Default Policy: Implicit Deny

FIREWALL_STATE: LISTENING

Concept: Notice how the firewall stops inspecting rules as soon as it finds a match. This is called "Top-Down" processing.