CS Border Firewall: Input Rules

• Default “allow”

  • Block known problem ports
  • Block unneeded services with potential problems
    • NFS, RPC, NETBIOS ...

• Block forged/malformed packets

  • Inbound with our SRC address
  • Inbound with “unrouteable” SRC addresses