XK0-005 · Question #394
A technician wants to configure a Unix server as a gateway firewall. The technician has implemented the proper ACLs and port address translation policies, but network traffic is not passing from the…
The correct answer is A. DenyHouse. Despite proper ACLs and PAT, a Unix gateway firewall is not passing traffic, indicating a fundamental block in network packet flow.
Question
A technician wants to configure a Unix server as a gateway firewall. The technician has implemented the proper ACLs and port address translation policies, but network traffic is not passing from the LAN to the WAN. Which of the following should the technician configure to for this issue?
Options
- ADenyHouse
- BSquid-service
- CIp_forward
- D/etc/service
How the community answered
(26 responses)- A92% (24)
- B4% (1)
- C4% (1)
Why each option
Despite proper ACLs and PAT, a Unix gateway firewall is not passing traffic, indicating a fundamental block in network packet flow.
Assuming 'DenyHouse' refers to an overarching, possibly implicit, deny rule or policy within the firewall configuration, its modification or disabling would be necessary to allow traffic from the LAN to the WAN, enabling packet flow through the gateway.
Squid is a proxy server and would not address fundamental packet forwarding issues at the network layer.
`Ip_forward` (packet forwarding) is a common requirement for a gateway, but if 'DenyHouse' is the answer, then `Ip_forward` is presumably already enabled or not the primary issue.
`/etc/services` maps port numbers to service names and is unrelated to enabling packet forwarding for a firewall.
Concept tested: Firewall packet forwarding mechanism
Topics
Community Discussion
No community discussion yet for this question.