Multiple Choice Questions: Iptables and Basic Firewall Concepts

📚 Quick Study Guide

• 🛡️ Iptables is a command-line firewall utility that uses policy chains to allow or block traffic.
• 🔗 Chains are lists of rules applied in order (INPUT, OUTPUT, FORWARD).
• 🎯 Rules specify criteria (e.g., source/destination IP, port) and actions (ACCEPT, DROP, REJECT).
• 🔢 Basic syntax: `iptables -A chain -i interface -p protocol --dport port -j target`
• 💡 `ACCEPT`: Allows the traffic.
• 🚫 `DROP`: Silently discards the traffic.
• 🚪 `REJECT`: Sends an error message back to the sender.
• 🔒 Default policies should be restrictive, allowing only necessary traffic.
• 🌍 Firewalls operate at the network layer and transport layer of the OSI model.
• 🔑 Statefulness: Firewalls can track the state of connections.

🧪 Practice Quiz

1. Which iptables chain is used to filter incoming traffic to the server itself?
   1. INPUT
   2. OUTPUT
   3. FORWARD
   4. FILTER
2. Which iptables target silently discards a packet without sending a response?
   1. ACCEPT
   2. REJECT
   3. DROP
   4. LOG
3. What does the `-p` option in an iptables rule specify?
   1. Port number
   2. Protocol
   3. Interface
   4. Target
4. Which command lists all current iptables rules?
   1. iptables -L
   2. iptables -S
   3. iptables -F
   4. iptables -X
5. Which iptables chain is used to filter traffic being routed *through* the server?
   1. INPUT
   2. OUTPUT
   3. FORWARD
   4. FILTER
6. What is the purpose of stateful firewall inspection?
   1. To only allow traffic from trusted IP addresses.
   2. To track the state of network connections.
   3. To block all incoming traffic by default.
   4. To encrypt all network traffic.
7. Which target sends back an ICMP "destination unreachable" message?
   1. ACCEPT
   2. REJECT
   3. DROP
   4. LOG