Friends will come back in this lesson we we're going to learn about how to hold and who are in the clear.
OK.
Now Bruce listen we have to learn how to use the firewall.
And so I was fine.
OK.
So listen we're going to learn more about Hoku harder the network here.
OK.
So let's see practically how to do this.
OK I'll put up the file which is prison.
It is a directory with sudo access.
OK.
So it is your.
And live it's virus CNN.com.
OK.
And in this fight how and in the line of code.
OK.
Are obviously going to protect our server against different types of attack.
OK.
So let's talk about each core here and it's working.
So the first block here you can see it's going to protect the server against spoofing attacks.
OK then another of the protocols that were against IP spoofing attacks OK the last lesson we learned
how to protect against spoofing.
OK.
So this is another way for protecting against IP spoofing attack.
The next line is ignored ICMP block cost request means a hacker can always get some information.
So VIGEN a block here the ping replied So keep this line going along the ping replies.
OK so this line will protect against these kinds of attack.
The next block is diciples source packet routing.
So I would suspect that routing means it is a mechanism used by Internet protocol to get a packet from
you so still destination.
So what happens is a hacker kept in the back gate OK and he can get the information.
The sensitive information like are led to the apology and by getting that possibly he can provide some
damage to our system.
OK so by adding these phone lines we can protect against these kinds of attacks hogi or Heiko Council
bypass some security restriction.
OK by getting to know this information OK.
So the next block is ignore Sindhi.
OK so ignoring the period that it's better for same reasons.
The reason is that I said that basically is the part of the Cubists created by this the person rocking
part of the network from the host choice.
So what happens is hackers can easily get an opt in table.
OK I'll take that out and he can send the traffic to his own choice so keep the incoming traffic to
his own choice and in his fear he can damage it.
We're in a different phase so we can block writing these lines.
OK in this configuration.
Fine.
OK can the next Luckies thing attacks.
Blocking does not work against syntax in similar attacks.
What happens is an attacker since hundreds of thousands of messages to the server.
So do do that what happens is our them gets full.
OK so this software could get hang or get slower.
So OK so that our performance is kicked down.
OK so performance get down to this attack so we can easily block these kinds of Courtown Ed in these
four lines of code here.
OK the next block is logged my audience in lock Martyn's what happens.
And attack could send the packets from fake IP.
Or you can call it as the IP which is not present to Kamins the same IP addresses is reserved for experimental
purposes.
So in these types of contacts what happens is our server by the time it is used to by our server to
process that packet and our silver band we get hysterical in an article since these kinds of packet
are daemon burned with the gate just so we can easily block log my inspired software by adding these
two lines of code.
And the last one is ignoring data pings by using some software.
Heckert can send hundreds of thousands of requests from different parts of the world from different
computers.
So we're OK and these things are caused by tick tick pings and that so were get down or get crushed.
OK so we can protect those that were against the data attack.
OK so in this way we can Hudner were not clear OK from all these kinds of possible attacks.