Stateful or stateless firewall?

[jchenao]

Hi,

Can someone explain me why they create the second rule if the firewall it's supossed to be stateful?

Question: What firewall rule would I use to only allow HTTP (80/TCP) traffic to and from the hosts on 10.0.0.0/8 network to a web server at IP address 192.168.1.254 and deny nodes on other networks communication with my web server?

Thanks in advance

[mvsheik123]

Hi,

As the webserver's ip is 192.168.1.254 (destination), the 1st rule & 3 rd rule shoule be fine. However, 3rd rule will block access toa ll services not just webservices.

Thx

MS