The Amalgamated Widget site began with a single firewall configuration, using firewall rules as shown in Table 15.4. Then Amalgamated updated the arrangement to use a dual-firewall arrangement like...

The Amalgamated Widget site began with a single firewall configuration, using firewall rules as shown in Table 15.4. Then Amalgamated updated the arrangement to use a dual-firewall arrangement like the one shown in Figure 15.16. All servers now reside on the DMZ, with IP addresses in the 30.40.80.x range. Rewrite the firewall rule set to work with the dual-firewall arrangement. Create two sets of rules: one for each firewall. Be sure to block all Internet-to-inside-LAN connections, while still allowing access to appropriate Amalgamated servers. Users on the Internet and on the internal LAN should see no difference in the updated configuration.

TABLE 15.4

FIGURE 15.16