2000 %PDF-1.3 1 0 obj << /Type /Catalog /Pages 2 0 R >> endobj 2 0 obj << /Type /Pages /Count 23 /Kids [20 0 R 66 0 R 73 0 R 77 0 R 79 0 R 81 0 R 83 0 R 85 0 R 87 0 R 89 0 R 91 0 R 93 0 R 95 0 R 97 0 R 99 0 R 101 0 R 103 0 R 105 0 R 107 0 R 109 0 R 113 0 R 115 0 R 144 0 R ] >> endobj 3 0 obj << /Type /Info /Producer (FOP-0_14_0) >> endobj 4 0 obj << /Font << /F11 5 0 R /F10 6 0 R /F9 7 0 R /F8 8 0 R /F7 9 0 R /F6 10 0 R /F5 11 0 R /F4 12 0 R /F3 13 0 R /F2 14 0 R /F1 15 0 R /F14 16 0 R /F13 17 0 R /F12 18 0 R >> /ProcSet [ /PDF /ImageC /Text ] >> endobj 5 0 obj << /Type /Font /Subtype /Type1 /Name /F11 /BaseFont /Courier-Bold /Encoding /WinAnsiEncoding >> endobj 6 0 obj << /Type /Font /Subtype /Type1 /Name /F10 /BaseFont /Courier-Oblique /Encoding /WinAnsiEncoding >> endobj 7 0 obj << /Type /Font /Subtype /Type1 /Name /F9 /BaseFont /Courier /Encoding /WinAnsiEncoding >> endobj 8 0 obj << /Type /Font /Subtype /Type1 /Name /F8 /BaseFont /Times-BoldItalic /Encoding /WinAnsiEncoding >> endobj 9 0 obj << /Type /Font /Subtype /Type1 /Name /F7 /BaseFont /Times-Bold /Encoding /WinAnsiEncoding >> endobj 10 0 obj << /Type /Font /Subtype /Type1 /Name /F6 /BaseFont /Times-Italic /Encoding /WinAnsiEncoding >> endobj 11 0 obj << /Type /Font /Subtype /Type1 /Name /F5 /BaseFont /Times-Roman /Encoding /WinAnsiEncoding >> endobj 12 0 obj << /Type /Font /Subtype /Type1 /Name /F4 /BaseFont /Helvetica-BoldOblique /Encoding /WinAnsiEncoding >> endobj 13 0 obj << /Type /Font /Subtype /Type1 /Name /F3 /BaseFont /Helvetica-Bold /Encoding /WinAnsiEncoding >> endobj 14 0 obj << /Type /Font /Subtype /Type1 /Name /F2 /BaseFont /Helvetica-Oblique /Encoding /WinAnsiEncoding >> endobj 15 0 obj << /Type /Font /Subtype /Type1 /Name /F1 /BaseFont /Helvetica /Encoding /WinAnsiEncoding >> endobj 16 0 obj << /Type /Font /Subtype /Type1 /Name /F14 /BaseFont /ZapfDingbats /Encoding /StandardEncoding >> endobj 17 0 obj << /Type /Font /Subtype /Type1 /Name /F13 /BaseFont /Symbol /Encoding /StandardEncoding >> endobj 18 0 obj << /Type /Font /Subtype /Type1 /Name /F12 /BaseFont /Courier-BoldOblique /Encoding /WinAnsiEncoding >> endobj 19 0 obj << /Length 3669 >> stream BT /F3 24 Tf 0 g 1 0 0 1 112.947 752.388 Tm (Linux) Tj 0 g 1 0 0 1 183.627 752.388 Tm (2.4) Tj 0 g 1 0 0 1 223.659 752.388 Tm (stateful) Tj 0 g 1 0 0 1 315.675 752.388 Tm (firewall) Tj 0 g 1 0 0 1 405.051 752.388 Tm (design) Tj /F1 14 Tf 0 g 1 0 0 1 108.99 716.368 Tm (Presented) Tj 0 g 1 0 0 1 176.694 716.368 Tm (by) Tj 0 g 1 0 0 1 195.37 716.368 Tm (developerWorks,) Tj 0 g 1 0 0 1 304.29 716.368 Tm (your) Tj 0 g 1 0 0 1 335.412 716.368 Tm (source) Tj 0 g 1 0 0 1 381.318 716.368 Tm (for) Tj 0 g 1 0 0 1 401.548 716.368 Tm (great) Tj 0 g 1 0 0 1 437.346 716.368 Tm (tutorials) Tj /F11 14 Tf 0 g 1 0 0 1 205.275 689.706 Tm (ibm.com/developerWorks) Tj ET q 0 G 70.875 650.218 m 524.475 650.218 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 629.794 Tm (Table) Tj 0 g 1 0 0 1 120.897 629.794 Tm (of) Tj 0 g 1 0 0 1 140.913 629.794 Tm (Contents) Tj /F1 8 Tf 0 g 1 0 0 1 70.875 605.324 Tm (If) Tj 0 g 1 0 0 1 77.547 605.324 Tm (you're) Tj 0 g 1 0 0 1 101.307 605.324 Tm (viewing) Tj 0 g 1 0 0 1 130.203 605.324 Tm (this) Tj 0 g 1 0 0 1 144.875 605.324 Tm (document) Tj 0 g 1 0 0 1 182.227 605.324 Tm (online,) Tj 0 g 1 0 0 1 208.019 605.324 Tm (you) Tj 0 g 1 0 0 1 223.139 605.324 Tm (can) Tj 0 g 1 0 0 1 238.259 605.324 Tm (click) Tj 0 g 1 0 0 1 256.035 605.324 Tm (any) Tj 0 g 1 0 0 1 271.155 605.324 Tm (of) Tj 0 g 1 0 0 1 280.051 605.324 Tm (the) Tj 0 g 1 0 0 1 293.395 605.324 Tm (topics) Tj 0 g 1 0 0 1 316.515 605.324 Tm (below) Tj 0 g 1 0 0 1 339.635 605.324 Tm (to) Tj 0 g 1 0 0 1 348.531 605.324 Tm (link) Tj 0 g 1 0 0 1 362.755 605.324 Tm (directly) Tj 0 g 1 0 0 1 390.315 605.324 Tm (to) Tj 0 g 1 0 0 1 399.211 605.324 Tm (that) Tj 0 g 1 0 0 1 414.779 605.324 Tm (section.) Tj /F1 14 Tf 0 0 1 rg 1 0 0 1 70.875 575.616 Tm (1.) Tj 0 0 1 rg 1 0 0 1 86.443 575.616 Tm (About) Tj 0 0 1 rg 1 0 0 1 126.917 575.616 Tm (this) Tj 0 0 1 rg 1 0 0 1 152.593 575.616 Tm (tutorial) Tj 0 0 1 rg 1 0 0 1 480.307 575.616 Tm (2) Tj 0 0 1 rg 1 0 0 1 70.875 553.666 Tm (2.) Tj 0 0 1 rg 1 0 0 1 86.443 553.666 Tm (First) Tj 0 0 1 rg 1 0 0 1 117.551 553.666 Tm (steps) Tj 0 0 1 rg 1 0 0 1 480.307 553.666 Tm (3) Tj 0 0 1 rg 1 0 0 1 70.875 531.716 Tm (3.) Tj 0 0 1 rg 1 0 0 1 86.443 531.716 Tm (Defining) Tj 0 0 1 rg 1 0 0 1 141.687 531.716 Tm (rules) Tj 0 0 1 rg 1 0 0 1 480.307 531.716 Tm (6) Tj 0 0 1 rg 1 0 0 1 70.875 509.766 Tm (4.) Tj 0 0 1 rg 1 0 0 1 86.443 509.766 Tm (Stateful) Tj 0 0 1 rg 1 0 0 1 137.809 509.766 Tm (firewalls) Tj 0 0 1 rg 1 0 0 1 480.307 509.766 Tm (8) Tj 0 0 1 rg 1 0 0 1 70.875 487.816 Tm (5.) Tj 0 0 1 rg 1 0 0 1 86.443 487.816 Tm (Stateful) Tj 0 0 1 rg 1 0 0 1 137.809 487.816 Tm (improvements) Tj 0 0 1 rg 1 0 0 1 480.307 487.816 Tm (12) Tj 0 0 1 rg 1 0 0 1 70.875 465.866 Tm (6.) Tj 0 0 1 rg 1 0 0 1 86.443 465.866 Tm (Stateful) Tj 0 0 1 rg 1 0 0 1 137.809 465.866 Tm (servers) Tj 0 0 1 rg 1 0 0 1 480.307 465.866 Tm (17) Tj 0 0 1 rg 1 0 0 1 70.875 443.916 Tm (7.) Tj 0 0 1 rg 1 0 0 1 86.443 443.916 Tm (Building) Tj 0 0 1 rg 1 0 0 1 140.133 443.916 Tm (a) Tj 0 0 1 rg 1 0 0 1 151.809 443.916 Tm (better) Tj 0 0 1 rg 1 0 0 1 191.499 443.916 Tm (server) Tj 0 0 1 rg 1 0 0 1 234.283 443.916 Tm (firewall) Tj 0 0 1 rg 1 0 0 1 480.307 443.916 Tm (20) Tj 0 0 1 rg 1 0 0 1 70.875 421.966 Tm (8.) Tj 0 0 1 rg 1 0 0 1 86.443 421.966 Tm (Resources) Tj 0 0 1 rg 1 0 0 1 480.307 421.966 Tm (22) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (1) Tj ET endstream endobj 20 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 19 0 R /Annots 21 0 R >> endobj 21 0 obj [ 22 0 R 24 0 R 25 0 R 26 0 R 27 0 R 28 0 R 30 0 R 31 0 R 32 0 R 33 0 R 35 0 R 36 0 R 37 0 R 38 0 R 40 0 R 41 0 R 42 0 R 43 0 R 45 0 R 46 0 R 47 0 R 48 0 R 50 0 R 51 0 R 52 0 R 53 0 R 55 0 R 56 0 R 57 0 R 58 0 R 59 0 R 60 0 R 61 0 R 63 0 R 64 0 R ] endobj 22 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 584.668 82.551 570.668 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 23 0 R /H /I >> endobj 23 0 obj << /S /GoTo /D [66 0 R /XYZ 65.875 776.12 null] >> endobj 24 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 584.668 123.025 570.668 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 23 0 R /H /I >> endobj 25 0 obj << /Type /Annot /Subtype /Link /Rect [ 126.917 584.668 148.701 570.668 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 23 0 R /H /I >> endobj 26 0 obj << /Type /Annot /Subtype /Link /Rect [ 152.593 584.668 194.607 570.668 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 23 0 R /H /I >> endobj 27 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 584.668 491.983 570.668 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 23 0 R /H /I >> endobj 28 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 562.718 82.551 548.718 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 29 0 R /H /I >> endobj 29 0 obj << /S /GoTo /D [73 0 R /XYZ 65.875 776.12 null] >> endobj 30 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 562.718 113.659 548.718 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 29 0 R /H /I >> endobj 31 0 obj << /Type /Annot /Subtype /Link /Rect [ 117.551 562.718 151.011 548.718 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 29 0 R /H /I >> endobj 32 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 562.718 491.983 548.718 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 29 0 R /H /I >> endobj 33 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 540.768 82.551 526.768 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 34 0 R /H /I >> endobj 34 0 obj << /S /GoTo /D [81 0 R /XYZ 65.875 776.12 null] >> endobj 35 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 540.768 137.795 526.768 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 34 0 R /H /I >> endobj 36 0 obj << /Type /Annot /Subtype /Link /Rect [ 141.687 540.768 172.025 526.768 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 34 0 R /H /I >> endobj 37 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 540.768 491.983 526.768 ] /C [ 0 0 0 ] / 2000 Border [ 0 0 0 ] /A 34 0 R /H /I >> endobj 38 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 518.818 82.551 504.818 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 39 0 R /H /I >> endobj 39 0 obj << /S /GoTo /D [85 0 R /XYZ 65.875 776.12 null] >> endobj 40 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 518.818 133.917 504.818 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 39 0 R /H /I >> endobj 41 0 obj << /Type /Annot /Subtype /Link /Rect [ 137.809 518.818 188.363 504.818 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 39 0 R /H /I >> endobj 42 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 518.818 491.983 504.818 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 39 0 R /H /I >> endobj 43 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 496.868 82.551 482.868 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 44 0 R /H /I >> endobj 44 0 obj << /S /GoTo /D [93 0 R /XYZ 65.875 776.12 null] >> endobj 45 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 496.868 133.917 482.868 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 44 0 R /H /I >> endobj 46 0 obj << /Type /Annot /Subtype /Link /Rect [ 137.809 496.868 225.715 482.868 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 44 0 R /H /I >> endobj 47 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 496.868 491.983 482.868 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 44 0 R /H /I >> endobj 48 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 474.918 82.551 460.918 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 49 0 R /H /I >> endobj 49 0 obj << /S /GoTo /D [103 0 R /XYZ 65.875 776.12 null] >> endobj 50 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 474.918 133.917 460.918 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 49 0 R /H /I >> endobj 51 0 obj << /Type /Annot /Subtype /Link /Rect [ 137.809 474.918 183.701 460.918 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 49 0 R /H /I >> endobj 52 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 474.918 491.983 460.918 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 49 0 R /H /I >> endobj 53 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 452.968 82.551 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 54 0 obj << /S /GoTo /D [109 0 R /XYZ 65.875 776.12 null] >> endobj 55 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 452.968 136.241 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 56 0 obj << /Type /Annot /Subtype /Link /Rect [ 140.133 452.968 147.917 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 57 0 obj << /Type /Annot /Subtype /Link /Rect [ 151.809 452.968 187.607 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 58 0 obj << /Type /Annot /Subtype /Link /Rect [ 191.499 452.968 230.391 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 59 0 obj << /Type /Annot /Subtype /Link /Rect [ 234.283 452.968 277.837 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 60 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 452.968 491.983 438.968 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 54 0 R /H /I >> endobj 61 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 431.018 82.551 417.018 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 62 0 R /H /I >> endobj 62 0 obj << /S /GoTo /D [115 0 R /XYZ 65.875 776.12 null] >> endobj 63 0 obj << /Type /Annot /Subtype /Link /Rect [ 86.443 431.018 153.349 417.018 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 62 0 R /H /I >> endobj 64 0 obj << /Type /Annot /Subtype /Link /Rect [ 480.307 431.018 491.983 417.018 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A 62 0 R /H /I >> endobj 65 0 obj << /Length 11456 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (1.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (About) Tj 0 g 1 0 0 1 207.963 756.696 Tm (this) Tj 0 g 1 0 0 1 240.975 756.696 Tm (tutorial) Tj 0 g 1 0 0 1 70.875 725.046 Tm (Should) Tj 0 g 1 0 0 1 131.913 725.046 Tm (I) Tj 0 g 1 0 0 1 141.921 725.046 Tm (take) Tj 0 g 1 0 0 1 180.945 725.046 Tm (this) Tj 0 g 1 0 0 1 213.957 725.046 Tm (tutorial?) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (This) Tj 0 g 1 0 0 1 94.712 701.422 Tm (tutorial) Tj 0 g 1 0 0 1 130.781 701.422 Tm (shows) Tj 0 g 1 0 0 1 165.013 701.422 Tm (you) Tj 0 g 1 0 0 1 185.803 701.422 Tm (how) Tj 0 g 1 0 0 1 209.035 701.422 Tm (to) Tj 0 g 1 0 0 1 221.267 701.422 Tm (use) Tj 0 g 1 0 0 1 242.057 701.422 Tm (netfilter) Tj 0 g 1 0 0 1 281.184 701.422 Tm (to) Tj 0 g 1 0 0 1 293.416 701.422 Tm (set) Tj 0 g 1 0 0 1 311.148 701.422 Tm (up) Tj 0 g 1 0 0 1 326.438 701.422 Tm (a) Tj 0 g 1 0 0 1 335.612 701.422 Tm (powerful) Tj 0 g 1 0 0 1 380.239 701.422 Tm (Linux) Tj 0 g 1 0 0 1 409.587 701.422 Tm (stateful) Tj 0 g 1 0 0 1 448.109 701.422 Tm (firewall.) Tj 0 g 1 0 0 1 488.446 701.422 Tm (All) Tj 0 g 1 0 0 1 503.725 701.422 Tm (you) Tj 0 g 1 0 0 1 70.875 688.247 Tm (need) Tj 0 g 1 0 0 1 98.397 688.247 Tm (is) Tj 0 g 1 0 0 1 109.397 688.247 Tm (an) Tj 0 g 1 0 0 1 124.687 688.247 Tm (existing) Tj 0 g 1 0 0 1 165.035 688.247 Tm (Linux) Tj 0 g 1 0 0 1 194.383 688.247 Tm (system) Tj 0 g 1 0 0 1 232.278 688.247 Tm (that's) Tj 0 g 1 0 0 1 261.285 688.247 Tm (currently) Tj 0 g 1 0 0 1 306.517 688.247 Tm (using) Tj 0 g 1 0 0 1 335.865 688.247 Tm (a) Tj 0 g 1 0 0 1 345.039 688.247 Tm (Linux) Tj 0 g 1 0 0 1 374.387 688.247 Tm (2.4) Tj 0 g 1 0 0 1 392.735 688.247 Tm (kernel.) Tj 0 g 1 0 0 1 428.804 688.247 Tm (A) Tj 0 g 1 0 0 1 439.199 688.247 Tm (laptop,) Tj 0 g 1 0 0 1 70.875 675.072 Tm (workstation,) Tj 0 g 1 0 0 1 132.618 675.072 Tm (router) Tj 0 g 1 0 0 1 164.408 675.072 Tm (or) Tj 0 g 1 0 0 1 177.245 675.072 Tm (server) Tj 0 g 1 0 0 1 210.861 675.072 Tm (with) Tj 0 g 1 0 0 1 233.477 675.072 Tm (a) Tj 0 g 1 0 0 1 242.651 675.072 Tm (Linux) Tj 0 g 1 0 0 1 271.999 675.072 Tm (2.4) Tj 0 g 1 0 0 1 290.347 675.072 Tm (kernel) Tj 0 g 1 0 0 1 323.358 675.072 Tm (will) Tj 0 g 1 0 0 1 341.684 675.072 Tm (do.) Tj 0 g 1 0 0 1 70.875 647.897 Tm (You) Tj 0 g 1 0 0 1 93.502 647.897 Tm (should) Tj 0 g 1 0 0 1 128.966 647.897 Tm (be) Tj 0 g 1 0 0 1 144.256 647.897 Tm (reasonably) Tj 0 g 1 0 0 1 201.115 647.897 Tm (familiar) Tj 0 g 1 0 0 1 239.615 647.897 Tm (with) Tj 0 g 1 0 0 1 262.231 647.897 Tm (standard) Tj 0 g 1 0 0 1 308.09 647.897 Tm (network) Tj 0 g 1 0 0 1 349.659 647.897 Tm (terminology) Tj 0 g 1 0 0 1 409.565 647.897 Tm (like) Tj 0 g 1 0 0 1 429.123 647.897 Tm (IP) Tj 0 g 1 0 0 1 442.576 647.897 Tm (addresses,) Tj 0 g 1 0 0 1 70.875 634.722 Tm (source) Tj 0 g 1 0 0 1 106.944 634.722 Tm (and) Tj 0 g 1 0 0 1 128.35 634.722 Tm (destination) Tj 0 g 1 0 0 1 184.604 634.722 Tm (port) Tj 0 g 1 0 0 1 206.615 634.722 Tm (numbers,) Tj 0 g 1 0 0 1 255.521 634.722 Tm (TCP,) Tj 0 g 1 0 0 1 283.637 634.722 Tm (UDP) Tj 0 g 1 0 0 1 309.916 634.722 Tm (and) Tj 0 g 1 0 0 1 331.322 634.722 Tm (ICMP,) Tj 0 g 1 0 0 1 364.938 634.722 Tm (etc.) Tj 0 g 1 0 0 1 385.728 634.722 Tm (By) Tj 0 g 1 0 0 1 401.623 634.722 Tm (the) Tj 0 g 1 0 0 1 419.971 634.722 Tm (end) Tj 0 g 1 0 0 1 441.377 634.722 Tm (of) Tj 0 g 1 0 0 1 453.609 634.722 Tm (the) Tj 0 g 1 0 0 1 471.957 634.722 Tm (tutorial,) Tj 0 g 1 0 0 1 70.875 621.547 Tm (you'll) Tj 0 g 1 0 0 1 98.65 621.547 Tm (understand) Tj 0 g 1 0 0 1 156.741 621.547 Tm (how) Tj 0 g 1 0 0 1 179.973 621.547 Tm (Linux) Tj 0 g 1 0 0 1 209.321 621.547 Tm (stateful) Tj 0 g 1 0 0 1 247.843 621.547 Tm (firewalls) Tj 0 g 1 0 0 1 290.622 621.547 Tm (are) Tj 0 g 1 0 0 1 309.575 621.547 Tm (put) Tj 0 g 1 0 0 1 327.923 621.547 Tm (together) Tj 0 g 1 0 0 1 371.34 621.547 Tm (and) Tj 0 g 1 0 0 1 392.746 621.547 Tm (you'll) Tj 0 g 1 0 0 1 420.521 621.547 Tm (have) Tj 0 g 1 0 0 1 447.427 621.547 Tm (several) Tj 0 g 1 0 0 1 70.875 608.372 Tm (example) Tj 0 g 1 0 0 1 115.502 608.372 Tm (configurations) Tj 0 g 1 0 0 1 187.035 608.372 Tm (to) Tj 0 g 1 0 0 1 199.267 608.372 Tm (use) Tj 0 g 1 0 0 1 220.057 608.372 Tm (in) Tj 0 g 1 0 0 1 231.673 608.372 Tm (your) Tj 0 g 1 0 0 1 256.126 608.372 Tm (own) Tj 0 g 1 0 0 1 279.358 608.372 Tm (projects.) Tj ET q 0 G 70.875 587.595 m 524.475 587.595 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 558.171 Tm (About) Tj 0 g 1 0 0 1 122.913 558.171 Tm (the) Tj 0 g 1 0 0 1 152.937 558.171 Tm (author) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 534.547 Tm (For) Tj 0 g 1 0 0 1 90.433 534.547 Tm (technical) Tj 0 g 1 0 0 1 136.897 534.547 Tm (questions) Tj 0 g 1 0 0 1 187.035 534.547 Tm (about) Tj 0 g 1 0 0 1 217.615 5 2000 34.547 Tm (the) Tj 0 g 1 0 0 1 235.963 534.547 Tm (content) Tj 0 g 1 0 0 1 275.101 534.547 Tm (of) Tj 0 g 1 0 0 1 287.333 534.547 Tm (this) Tj 0 g 1 0 0 1 307.507 534.547 Tm (tutorial,) Tj 0 g 1 0 0 1 346.634 534.547 Tm (contact) Tj 0 g 1 0 0 1 385.156 534.547 Tm (the) Tj 0 g 1 0 0 1 403.504 534.547 Tm (author,) Tj 0 g 1 0 0 1 440.805 534.547 Tm (Daniel) Tj 0 g 1 0 0 1 475.037 534.547 Tm (Robbins,) Tj 0 g 1 0 0 1 70.875 521.372 Tm (at) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 83.107 521.372 Tm (drobbins@gentoo.org) Tj /F1 11 Tf 0 g 1 0 0 1 192.106 521.372 Tm (.) Tj 0 g 1 0 0 1 70.875 494.197 Tm (Residing) Tj 0 g 1 0 0 1 116.723 494.197 Tm (in) Tj 0 g 1 0 0 1 128.339 494.197 Tm (Albuquerque,) Tj 0 g 1 0 0 1 196.825 494.197 Tm (New) Tj 0 g 1 0 0 1 221.883 494.197 Tm (Mexico,) Tj 0 g 1 0 0 1 262.836 494.197 Tm (Daniel) Tj 0 g 1 0 0 1 297.068 494.197 Tm (Robbins) Tj 0 g 1 0 0 1 340.474 494.197 Tm (is) Tj 0 g 1 0 0 1 351.474 494.197 Tm (the) Tj 0 g 1 0 0 1 369.822 494.197 Tm (President/CEO) Tj 0 g 1 0 0 1 446.239 494.197 Tm (of) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 458.471 494.197 Tm (Gentoo) Tj 0 0 1 rg 1 0 0 1 70.875 481.022 Tm (Technologies,) Tj 0 0 1 rg 1 0 0 1 142.408 481.022 Tm (Inc.) Tj /F1 11 Tf 0 g 1 0 0 1 163.198 481.022 Tm (,) Tj 0 g 1 0 0 1 169.314 481.022 Tm (the) Tj 0 g 1 0 0 1 187.662 481.022 Tm (creator) Tj 0 g 1 0 0 1 224.952 481.022 Tm (of) Tj /F3 11 Tf 0 g 1 0 0 1 237.184 481.022 Tm (Gentoo) Tj 0 g 1 0 0 1 278.742 481.022 Tm (Linux) Tj /F1 11 Tf 0 g 1 0 0 1 308.079 481.022 Tm (,) Tj 0 g 1 0 0 1 314.195 481.022 Tm (an) Tj 0 g 1 0 0 1 329.485 481.022 Tm (advanced) Tj 0 g 1 0 0 1 380.239 481.022 Tm (Linux) Tj 0 g 1 0 0 1 409.587 481.022 Tm (for) Tj 0 g 1 0 0 1 425.482 481.022 Tm (the) Tj 0 g 1 0 0 1 443.83 481.022 Tm (PC,) Tj 0 g 1 0 0 1 465.225 481.022 Tm (and) Tj 0 g 1 0 0 1 486.631 481.022 Tm (the) Tj /F3 11 Tf 0 g 1 0 0 1 70.875 467.847 Tm (Portage) Tj /F1 11 Tf 0 g 1 0 0 1 114.886 467.847 Tm (system,) Tj 0 g 1 0 0 1 155.839 467.847 Tm (a) Tj 0 g 1 0 0 1 165.013 467.847 Tm (next-generation) Tj 0 g 1 0 0 1 247.26 467.847 Tm (ports) Tj 0 g 1 0 0 1 274.771 467.847 Tm (system) Tj 0 g 1 0 0 1 312.666 467.847 Tm (for) Tj 0 g 1 0 0 1 328.561 467.847 Tm (Linux.) Tj 0 g 1 0 0 1 360.967 467.847 Tm (He) Tj 0 g 1 0 0 1 378.083 467.847 Tm (has) Tj 0 g 1 0 0 1 398.873 467.847 Tm (also) Tj 0 g 1 0 0 1 422.105 467.847 Tm (served) Tj 0 g 1 0 0 1 458.174 467.847 Tm (as) Tj 0 g 1 0 0 1 472.848 467.847 Tm (a) Tj 0 g 1 0 0 1 70.875 454.672 Tm (contributing) Tj 0 g 1 0 0 1 130.792 454.672 Tm (author) Tj 0 g 1 0 0 1 165.035 454.672 Tm (for) Tj 0 g 1 0 0 1 180.93 454.672 Tm (the) Tj 0 g 1 0 0 1 199.278 454.672 Tm (Macmillan) Tj 0 g 1 0 0 1 251.836 454.672 Tm (books) Tj /F2 11 Tf 0 g 1 0 0 1 284.242 454.672 Tm (Caldera) Tj 0 g 1 0 0 1 325.811 454.672 Tm (OpenLinux) Tj 0 g 1 0 0 1 382.065 454.672 Tm (Unleashed) Tj /F1 11 Tf 0 g 1 0 0 1 434.645 454.672 Tm (,) Tj /F2 11 Tf 0 g 1 0 0 1 440.761 454.672 Tm (SuSE) Tj 0 g 1 0 0 1 471.946 454.672 Tm (Linux) Tj 0 g 1 0 0 1 70.875 441.497 Tm (Unleashed) Tj /F1 11 Tf 0 g 1 0 0 1 123.455 441.497 Tm (,) Tj 0 g 1 0 0 1 129.571 441.497 Tm (and) Tj /F2 11 Tf 0 g 1 0 0 1 150.977 441.497 Tm (Samba) Tj 0 g 1 0 0 1 188.883 441.497 Tm (Unleashed) Tj /F1 11 Tf 0 g 1 0 0 1 241.463 441.497 Tm (.) Tj 0 g 1 0 0 1 247.579 441.497 Tm (Daniel) Tj 0 g 1 0 0 1 281.811 441.497 Tm (has) Tj 0 g 1 0 0 1 302.601 441.497 Tm (been) Tj 0 g 1 0 0 1 330.123 441.497 Tm (involved) Tj 0 g 1 0 0 1 373.529 441.497 Tm (with) Tj 0 g 1 0 0 1 396.145 441.497 Tm (computers) Tj 0 g 1 0 0 1 450.551 441.497 Tm (in) Tj 0 g 1 0 0 1 462.167 441.497 Tm (some) Tj 0 g 1 0 0 1 70.875 428.322 Tm (fashion) Tj 0 g 1 0 0 1 109.397 428.322 Tm (since) Tj 0 g 1 0 0 1 138.129 428.322 Tm (the) Tj 0 g 1 0 0 1 156.477 428.322 Tm (second) Tj 0 g 1 0 0 1 194.999 428.322 Tm (grade,) Tj 0 g 1 0 0 1 229.242 428.322 Tm (when) Tj 0 g 1 0 0 1 258.59 428.322 Tm (he) Tj 0 g 1 0 0 1 273.88 428.322 Tm (was) Tj 0 g 1 0 0 1 296.496 428.322 Tm (first) Tj 0 g 1 0 0 1 317.275 428.322 Tm (exposed) Tj 0 g 1 0 0 1 361.913 428.322 Tm (to) Tj 0 g 1 0 0 1 374.145 428.322 Tm (the) Tj 0 g 1 0 0 1 392.493 428.322 Tm (Logo) Tj 0 g 1 0 0 1 420.015 428.322 Tm (programming) Tj 0 g 1 0 0 1 70.875 415.147 Tm (language) Tj 0 g 1 0 0 1 119.187 415.147 Tm (as) Tj 0 g 1 0 0 1 133.861 415.147 Tm (well) Tj 0 g 1 0 0 1 155.861 415.147 Tm (as) Tj 0 g 1 0 0 1 170.535 415.147 Tm (a) Tj 0 g 1 0 0 1 179.709 415.147 Tm (potentially) Tj 0 g 1 0 0 1 232.289 415.147 Tm (dangerous) Tj 0 g 1 0 0 1 287.322 415.147 Tm (dose) Tj 0 g 1 0 0 1 314.228 415.147 Tm (of) Tj 0 g 1 0 0 1 326.46 415.147 Tm (Pac) Tj 0 g 1 0 0 1 348.471 415.147 Tm (Man.) Tj 0 g 1 0 0 1 375.982 415.147 Tm (This) Tj 0 g 1 0 0 1 399.819 415.147 Tm (probably) Tj 0 g 1 0 0 1 445.062 415.147 Tm (explains) Tj 0 g 1 0 0 1 488.468 415.147 Tm (why) Tj 0 g 1 0 0 1 511.084 415.147 Tm (he) Tj 0 g 1 0 0 1 70.875 401.972 Tm (has) Tj 0 g 1 0 0 1 91.665 401.972 Tm (since) Tj 0 g 1 0 0 1 120.397 401.972 Tm (served) Tj 0 g 1 0 0 1 156.466 401.972 Tm (as) Tj 0 g 1 0 0 1 171.14 401.972 Tm (a) Tj 0 g 1 0 0 1 180.314 401.972 Tm (Lead) Tj 0 g 1 0 0 1 207.836 401.972 Tm (Graphic) Tj 0 g 1 0 0 1 249.405 401.972 Tm (Artist) Tj 0 g 1 0 0 1 277.521 401.972 Tm (at) Tj /F3 11 Tf 0 g 1 0 0 1 289.753 401.972 Tm (SONY) Tj 0 g 1 0 0 1 323.985 401.972 Tm (Electronic) Tj 0 g 1 0 0 1 380.228 401.972 Tm (Publishing/Psygnosis) Tj /F1 11 Tf 0 g 1 0 0 1 494.54 401.972 Tm (.) Tj 0 g 1 0 0 1 70.875 388.797 Tm (Daniel) Tj 0 g 1 0 0 1 105.107 388.797 Tm (enjoys) Tj 0 g 1 0 0 1 139.955 388.797 Tm (spending) Tj 0 g 1 0 0 1 187.651 388.797 Tm (time) Tj 0 g 1 0 0 1 211.488 388.797 Tm (with) Tj 0 g 1 0 0 1 234.104 388.797 Tm (his) Tj 0 g 1 0 0 1 251.22 388.797 Tm (wife,) Tj 0 g 1 0 0 1 276.894 388.797 Tm (Mary,) Tj 0 g 1 0 0 1 307.452 388.797 Tm (and) Tj 0 g 1 0 0 1 328.858 388.797 Tm (his) Tj 0 g 1 0 0 1 345.974 388.797 Tm (new) Tj 0 g 1 0 0 1 369.206 388.797 Tm (baby) Tj 0 g 1 0 0 1 396.112 388.797 Tm (daughter,) Tj 0 g 1 0 0 1 445.645 388.797 Tm (Hadassah.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (2) Tj ET endstream endobj 66 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 65 0 R /Annots 67 0 R >> endobj 67 0 obj [ 68 0 R 69 0 R 70 0 R 71 0 R ] endobj 68 0 obj << /Type /Annot /Subtype /Link /Rect [ 83.107 528.27 189.048 517.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (mailto:drobbins@gentoo.org) /S /URI >> /H /I >> endobj 69 0 obj << /Type /Annot /Subtype /Link /Rect [ 458.471 501.095 494.551 490.095 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.gentoo.org) /S /URI >> /H /I >> endobj 70 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 487.92 139.35 476.92 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.gentoo.org) /S /URI >> /H /I >> endobj 71 0 obj << /Type /Annot /Subtype /Link /Rect [ 142.408 487.92 160.14 476.92 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.gentoo.org) /S /URI >> /H /I >> endobj 72 0 obj << /Length 14031 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (2.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (First) Tj 0 g 1 0 0 1 195.921 756.696 Tm (steps) Tj 0 g 1 0 0 1 70.875 725.046 Tm (Defining) Tj 0 g 1 0 0 1 141.903 725.046 Tm (our) Tj 0 g 1 0 0 1 172.917 725.046 Tm (goal) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (In) Tj 0 g 1 0 0 1 83.107 701.422 Tm (this) Tj 0 g 1 0 0 1 103.281 701.422 Tm (tutorial,) Tj 0 g 1 0 0 1 142.408 701.422 Tm (we're) Tj 0 g 1 0 0 1 171.404 701.422 Tm (going) Tj 0 g 1 0 0 1 201.368 701.422 2000 Tm (to) Tj 0 g 1 0 0 1 213.6 701.422 Tm (put) Tj 0 g 1 0 0 1 231.948 701.422 Tm (together) Tj 0 g 1 0 0 1 275.365 701.422 Tm (a) Tj 0 g 1 0 0 1 284.539 701.422 Tm (Linux) Tj 0 g 1 0 0 1 313.887 701.422 Tm (stateful) Tj 0 g 1 0 0 1 352.409 701.422 Tm (firewall.) Tj 0 g 1 0 0 1 392.746 701.422 Tm (Our) Tj 0 g 1 0 0 1 414.141 701.422 Tm (firewall) Tj 0 g 1 0 0 1 451.42 701.422 Tm (is) Tj 0 g 1 0 0 1 462.42 701.422 Tm (going) Tj 0 g 1 0 0 1 492.384 701.422 Tm (to) Tj 0 g 1 0 0 1 504.616 701.422 Tm (run) Tj 0 g 1 0 0 1 70.875 688.247 Tm (on) Tj 0 g 1 0 0 1 86.165 688.247 Tm (a) Tj 0 g 1 0 0 1 95.339 688.247 Tm (Linux) Tj 0 g 1 0 0 1 124.687 688.247 Tm (laptop,) Tj 0 g 1 0 0 1 160.767 688.247 Tm (workstation,) Tj 0 g 1 0 0 1 222.51 688.247 Tm (server,) Tj 0 g 1 0 0 1 259.184 688.247 Tm (or) Tj 0 g 1 0 0 1 272.021 688.247 Tm (router;) Tj 0 g 1 0 0 1 306.869 688.247 Tm (its) Tj 0 g 1 0 0 1 320.927 688.247 Tm (primary) Tj 0 g 1 0 0 1 360.648 688.247 Tm (goal) Tj 0 g 1 0 0 1 384.496 688.247 Tm (is) Tj 0 g 1 0 0 1 395.496 688.247 Tm (to) Tj 0 g 1 0 0 1 407.728 688.247 Tm (allow) Tj 0 g 1 0 0 1 435.844 688.247 Tm (only) Tj 0 g 1 0 0 1 459.076 688.247 Tm (certain) Tj 0 g 1 0 0 1 495.145 688.247 Tm (types) Tj 0 g 1 0 0 1 70.875 675.072 Tm (of) Tj 0 g 1 0 0 1 83.107 675.072 Tm (network) Tj 0 g 1 0 0 1 124.676 675.072 Tm (traffic) Tj 0 g 1 0 0 1 154.629 675.072 Tm (to) Tj 0 g 1 0 0 1 166.861 675.072 Tm (pass) Tj 0 g 1 0 0 1 193.151 675.072 Tm (through.) Tj 0 g 1 0 0 1 236.568 675.072 Tm (To) Tj 0 g 1 0 0 1 252.463 675.072 Tm (increase) Tj 0 g 1 0 0 1 297.09 675.072 Tm (security,) Tj 0 g 1 0 0 1 341.101 675.072 Tm (we're) Tj 0 g 1 0 0 1 370.097 675.072 Tm (going) Tj 0 g 1 0 0 1 400.061 675.072 Tm (to) Tj 0 g 1 0 0 1 412.293 675.072 Tm (configure) Tj 0 g 1 0 0 1 460.594 675.072 Tm (the) Tj 0 g 1 0 0 1 478.942 675.072 Tm (firewall) Tj 0 g 1 0 0 1 70.875 661.897 Tm (to) Tj 0 g 1 0 0 1 83.107 661.897 Tm (drop) Tj 0 g 1 0 0 1 108.176 661.897 Tm (or) Tj 0 g 1 0 0 1 121.013 661.897 Tm (reject) Tj 0 g 1 0 0 1 150.966 661.897 Tm (traffic) Tj 0 g 1 0 0 1 180.919 661.897 Tm (that) Tj 0 g 1 0 0 1 202.325 661.897 Tm (we're) Tj 0 g 1 0 0 1 231.321 661.897 Tm (not) Tj 0 g 1 0 0 1 249.669 661.897 Tm (interested) Tj 0 g 1 0 0 1 301.028 661.897 Tm (in,) Tj 0 g 1 0 0 1 315.702 661.897 Tm (as) Tj 0 g 1 0 0 1 330.376 661.897 Tm (well) Tj 0 g 1 0 0 1 352.376 661.897 Tm (as) Tj 0 g 1 0 0 1 367.05 661.897 Tm (traffic) Tj 0 g 1 0 0 1 397.003 661.897 Tm (that) Tj 0 g 1 0 0 1 418.409 661.897 Tm (could) Tj 0 g 1 0 0 1 447.757 661.897 Tm (pose) Tj 0 g 1 0 0 1 474.663 661.897 Tm (a) Tj 0 g 1 0 0 1 483.837 661.897 Tm (security) Tj 0 g 1 0 0 1 70.875 648.722 Tm (threat.) Tj ET q 0 G 70.875 627.945 m 524.475 627.945 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 598.521 Tm (Getting) Tj 0 g 1 0 0 1 133.911 598.521 Tm (the) Tj 0 g 1 0 0 1 163.935 598.521 Tm (tools) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 574.897 Tm (Before) Tj 0 g 1 0 0 1 106.339 574.897 Tm (we) Tj 0 g 1 0 0 1 123.455 574.897 Tm (start) Tj 0 g 1 0 0 1 147.908 574.897 Tm (designing) Tj 0 g 1 0 0 1 198.046 574.897 Tm (a) Tj 0 g 1 0 0 1 207.22 574.897 Tm (firewall,) Tj 0 g 1 0 0 1 247.557 574.897 Tm (we) Tj 0 g 1 0 0 1 264.673 574.897 Tm (need) Tj 0 g 1 0 0 1 292.195 574.897 Tm (to) Tj 0 g 1 0 0 1 304.427 574.897 Tm (do) Tj 0 g 1 0 0 1 319.717 574.897 Tm (two) Tj 0 g 1 0 0 1 339.891 574.897 Tm (things) Tj 0 g 1 0 0 1 369.239 574.897 Tm (.) Tj 0 g 1 0 0 1 375.355 574.897 Tm (First,) Tj 0 g 1 0 0 1 402.855 574.897 Tm (we) Tj 0 g 1 0 0 1 419.971 574.897 Tm (need) Tj 0 g 1 0 0 1 447.493 574.897 Tm (to) Tj 0 g 1 0 0 1 459.725 574.897 Tm (make) Tj 0 g 1 0 0 1 489.678 574.897 Tm (sure) Tj 0 g 1 0 0 1 70.875 561.722 Tm (that) Tj 0 g 1 0 0 1 92.281 561.722 Tm (the) Tj 0 g 1 0 0 1 110.629 561.722 Tm ("iptables") Tj 0 g 1 0 0 1 159.403 561.722 Tm (command) Tj 0 g 1 0 0 1 210.751 561.722 Tm (is) Tj 0 g 1 0 0 1 221.751 561.722 Tm (available.) Tj 0 g 1 0 0 1 271.273 561.722 Tm (As) Tj 0 g 1 0 0 1 287.168 561.722 Tm (root,) Tj 0 g 1 0 0 1 312.237 561.722 Tm (type) Tj 0 g 1 0 0 1 336.085 561.722 Tm ("iptables") Tj 0 g 1 0 0 1 384.859 561.722 Tm (and) Tj 0 g 1 0 0 1 406.265 561.722 Tm (see) Tj 0 g 1 0 0 1 427.055 561.722 Tm (if) Tj 0 g 1 0 0 1 435.613 561.722 Tm (it) Tj 0 g 1 0 0 1 444.171 561.722 Tm (exists.) Tj 0 g 1 0 0 1 478.403 561.722 Tm (If) Tj 0 g 1 0 0 1 487.577 561.722 Tm (it) Tj 0 g 1 0 0 1 70.875 548.547 Tm (doesn't,) Tj 0 g 1 0 0 1 112.114 548.547 Tm (then) Tj 0 g 1 0 0 1 136.578 548.547 Tm (we'll) Tj 0 g 1 0 0 1 160.679 548.547 Tm (need) Tj 0 g 1 0 0 1 188.201 548.547 Tm (to) Tj 0 g 1 0 0 1 200.433 548.547 Tm (get) Tj 0 g 1 0 0 1 218.781 548.547 Tm (it) Tj 0 g 1 0 0 1 227.339 548.547 Tm (installed) Tj 0 g 1 0 0 1 270.745 548.547 Tm (first.) Tj 0 g 1 0 0 1 294.582 548.547 Tm (Here's) Tj 0 g 1 0 0 1 329.078 548.547 Tm (how:) Tj 0 g 1 0 0 1 355.368 548.547 Tm (head) Tj 0 g 1 0 0 1 382.89 548.547 Tm (over) Tj 0 g 1 0 0 1 407.343 548.547 Tm (to) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 70.875 535.372 Tm (http://netfilter.samba.org) Tj /F1 11 Tf 0 g 1 0 0 1 192.546 535.372 Tm (and) Tj 0 g 1 0 0 1 213.952 535.372 Tm (grab) Tj 0 g 1 0 0 1 239.021 535.372 Tm (the) Tj 0 g 1 0 0 1 257.369 535.372 Tm (most) Tj 0 g 1 0 0 1 284.264 535.372 Tm (recent) Tj 0 g 1 0 0 1 317.891 535.372 Tm (version) Tj 0 g 1 0 0 1 356.402 535.372 Tm (of) Tj 0 g 1 0 0 1 368.634 535.372 Tm (iptables.tar.gz) Tj 0 g 1 0 0 1 440.167 535.372 Tm (\(currently) Tj 0 g 1 0 0 1 70.875 522.197 Tm (iptables-1.1.2.tar.gz\)) Tj 0 g 1 0 0 1 176.959 522.197 Tm (you) Tj 0 g 1 0 0 1 197.749 522.197 Tm (can) Tj 0 g 1 0 0 1 218.539 522.197 Tm (find.) Tj 0 g 1 0 0 1 242.387 522.197 Tm (Then,) Tj 0 g 1 0 0 1 273.572 522.197 Tm (install) Tj 0 g 1 0 0 1 304.746 522.197 Tm (it) Tj 0 g 1 0 0 1 313.304 522.197 Tm (by) Tj 0 g 1 0 0 1 327.978 522.197 Tm (typing) Tj 0 g 1 0 0 1 360.384 522.197 Tm (in) Tj 0 g 1 0 0 1 372.0 522.197 Tm (the) Tj 0 g 1 0 0 1 390.348 522.197 Tm (following) Tj 0 g 1 0 0 1 436.196 522.197 Tm (commands) Tj 0 g 1 0 0 1 70.875 509.022 Tm (\(output) Tj 0 g 1 0 0 1 108.176 509.022 Tm (omitted) Tj 0 g 1 0 0 1 147.303 509.022 Tm (for) Tj 0 g 1 0 0 1 163.198 509.022 Tm (brevity\):) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 482.826 Tm (#) Tj 0 g 1 0 0 1 90.675 482.826 Tm (tar) Tj 0 g 1 0 0 1 117.075 482.826 Tm (xzvf) Tj 0 g 1 0 0 1 150.075 482.826 Tm (iptables-1.1.2.tar.gz) Tj 0 g 1 0 0 1 77.475 471.18 Tm (#) Tj 0 g 1 0 0 1 90.675 471.18 Tm (cd) Tj 0 g 1 0 0 1 110.475 471.18 Tm (iptables-1.1.2) Tj 0 g 1 0 0 1 77.475 459.534 Tm (#) Tj 0 g 1 0 0 1 90.675 459.534 Tm (make) Tj 0 g 1 0 0 1 77.475 447.888 Tm (#) Tj 0 g 1 0 0 1 90.675 447.888 Tm (make) Tj 0 g 1 0 0 1 123.675 447.888 Tm (install) Tj ET q 0 G 70.875 416.015 m 524.475 416.015 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 386.591 Tm (Kernel) Tj 0 g 1 0 0 1 127.899 386.591 Tm (configuration,) Tj 0 g 1 0 0 1 240.957 386.591 Tm (Part) Tj 0 g 1 0 0 1 278.973 386.591 Tm (1) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 362.967 Tm (Once) Tj 0 g 1 0 0 1 100.223 362.967 Tm (installed,) Tj 0 g 1 0 0 1 146.687 362.967 Tm (you) Tj 0 g 1 0 0 1 167.477 362.967 Tm (should) Tj 0 g 1 0 0 1 202.941 362.967 Tm (have) Tj 0 g 1 0 0 1 229.847 362.967 Tm (an) Tj 0 g 1 0 0 1 245.137 362.967 Tm ("iptables") Tj 0 g 1 0 0 1 293.911 362.967 Tm (command) Tj 0 g 1 0 0 1 345.259 362.967 Tm (available) Tj 0 g 1 0 0 1 391.723 362.967 Tm (for) Tj 0 g 1 0 0 1 407.618 362.967 Tm (use,) Tj 0 g 1 0 0 1 431.466 362.967 Tm (as) Tj 0 g 1 0 0 1 446.14 362.967 Tm (well) Tj 0 g 1 0 0 1 468.14 362.967 Tm (as) Tj 0 g 1 0 0 1 482.814 362.967 Tm (the) Tj 0 g 1 0 0 1 70.875 349.792 Tm (handy) Tj 0 g 1 0 0 1 103.897 349.792 Tm (iptables) Tj 0 g 1 0 0 1 144.861 349.792 Tm (man) Tj 0 g 1 0 0 1 169.314 349.792 Tm (page) Tj 0 g 1 0 0 1 196.836 349.792 Tm (\("man) Tj 0 g 1 0 0 1 228.857 349.792 Tm (iptables"\).) Tj 0 g 1 0 0 1 280.447 349.792 Tm (Great;) Tj 0 g 1 0 0 1 314.074 349.792 Tm (now) Tj 0 g 1 0 0 1 337.306 349.792 Tm (all) Tj 0 g 1 0 0 1 351.364 349.792 Tm (we) Tj 0 g 1 0 0 1 368.48 349.792 Tm (need) Tj 0 g 1 0 0 1 396.002 349.792 Tm (is) Tj 0 g 1 0 0 1 407.002 349.792 Tm (to) Tj 0 g 1 0 0 1 419.234 349.792 Tm (make) Tj 0 g 1 0 0 1 449.187 349.792 Tm (sure) Tj 0 g 1 0 0 1 473.64 349.792 Tm (that) Tj 0 g 1 0 2000 0 1 495.046 349.792 Tm (we) Tj 0 g 1 0 0 1 70.875 336.617 Tm (have) Tj 0 g 1 0 0 1 97.781 336.617 Tm (the) Tj 0 g 1 0 0 1 116.129 336.617 Tm (necessary) Tj 0 g 1 0 0 1 169.314 336.617 Tm (functionality) Tj 0 g 1 0 0 1 230.452 336.617 Tm (built) Tj 0 g 1 0 0 1 253.684 336.617 Tm (into) Tj 0 g 1 0 0 1 274.474 336.617 Tm (the) Tj 0 g 1 0 0 1 292.822 336.617 Tm (kernel.) Tj 0 g 1 0 0 1 328.891 336.617 Tm (This) Tj 0 g 1 0 0 1 352.728 336.617 Tm (tutorial) Tj 0 g 1 0 0 1 388.797 336.617 Tm (assumes) Tj 0 g 1 0 0 1 435.866 336.617 Tm (that) Tj 0 g 1 0 0 1 457.272 336.617 Tm (you) Tj 0 g 1 0 0 1 478.062 336.617 Tm (compile) Tj 0 g 1 0 0 1 70.875 323.442 Tm (your) Tj 0 g 1 0 0 1 95.328 323.442 Tm (own) Tj 0 g 1 0 0 1 118.56 323.442 Tm (kernels.) Tj 0 g 1 0 0 1 160.129 323.442 Tm (Head) Tj 0 g 1 0 0 1 189.477 323.442 Tm (over) Tj 0 g 1 0 0 1 213.93 323.442 Tm (to) Tj 0 g 1 0 0 1 226.162 323.442 Tm (/usr/src/linux,) Tj 0 g 1 0 0 1 294.01 323.442 Tm (and) Tj 0 g 1 0 0 1 315.416 323.442 Tm (type) Tj 0 g 1 0 0 1 339.264 323.442 Tm ("make) Tj 0 g 1 0 0 1 373.122 323.442 Tm (menuconfig") Tj 0 g 1 0 0 1 436.944 323.442 Tm (or) Tj 0 g 1 0 0 1 449.781 323.442 Tm ("make) Tj 0 g 1 0 0 1 70.875 310.267 Tm (xconfig";) Tj 0 g 1 0 0 1 115.744 310.267 Tm (we're) Tj 0 g 1 0 0 1 144.74 310.267 Tm (going) Tj 0 g 1 0 0 1 174.704 310.267 Tm (to) Tj 0 g 1 0 0 1 186.936 310.267 Tm (enable) Tj 0 g 1 0 0 1 223.016 310.267 Tm (some) Tj 0 g 1 0 0 1 252.969 310.267 Tm (kernel) Tj 0 g 1 0 0 1 285.98 310.267 Tm (network) Tj 0 g 1 0 0 1 327.549 310.267 Tm (functionality.) Tj ET q 0 G 70.875 289.49 m 524.475 289.49 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 260.066 Tm (Kernel) Tj 0 g 1 0 0 1 127.899 260.066 Tm (configuration,) Tj 0 g 1 0 0 1 240.957 260.066 Tm (Part) Tj 0 g 1 0 0 1 278.973 260.066 Tm (2) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 236.442 Tm (Under) Tj 0 g 1 0 0 1 103.886 236.442 Tm (the) Tj 0 g 1 0 0 1 122.234 236.442 Tm ("Networking) Tj 0 g 1 0 0 1 184.208 236.442 Tm (options") Tj 0 g 1 0 0 1 226.635 236.442 Tm (section,) Tj 0 g 1 0 0 1 267.599 236.442 Tm (make) Tj 0 g 1 0 0 1 297.552 236.442 Tm (sure) Tj 0 g 1 0 0 1 322.005 236.442 Tm (that) Tj 0 g 1 0 0 1 343.411 236.442 Tm (you) Tj 0 g 1 0 0 1 364.201 236.442 Tm (enable) Tj 0 g 1 0 0 1 400.281 236.442 Tm (at) Tj 0 g 1 0 0 1 412.513 236.442 Tm (least) Tj 0 g 1 0 0 1 438.803 236.442 Tm (the) Tj 0 g 1 0 0 1 457.151 236.442 Tm (following) Tj 0 g 1 0 0 1 70.875 223.267 Tm (options:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 197.071 Tm (<) Tj 0 g 1 0 0 1 84.075 197.071 Tm (*) Tj 0 g 1 0 0 1 90.675 197.071 Tm (>) Tj 0 g 1 0 0 1 103.875 197.071 Tm (Packet) Tj 0 g 1 0 0 1 150.075 197.071 Tm (socket) Tj 0 g 1 0 0 1 77.475 185.425 Tm ([*]) Tj 0 g 1 0 0 1 103.875 185.425 Tm (Network) Tj 0 g 1 0 0 1 156.675 185.425 Tm (packet) Tj 0 g 1 0 0 1 202.875 185.425 Tm (filtering) Tj 0 g 1 0 0 1 268.875 185.425 Tm (\(replaces) Tj 0 g 1 0 0 1 334.875 185.425 Tm (ipchains\)) Tj 0 g 1 0 0 1 77.475 173.779 Tm (<) Tj 0 g 1 0 0 1 84.075 173.779 Tm (*) Tj 0 g 1 0 0 1 90.675 173.779 Tm (>) Tj 0 g 1 0 0 1 103.875 173.779 Tm (Unix) Tj 0 g 1 0 0 1 136.875 173.779 Tm (domain) Tj 0 g 1 0 0 1 183.075 173.779 Tm (sockets) Tj 0 g 1 0 0 1 77.475 162.133 Tm ([*]) Tj 0 g 1 0 0 1 103.875 162.133 Tm (TCP/IP) Tj 0 g 1 0 0 1 150.075 162.133 Tm (networking) Tj 0 g 1 0 0 1 77.475 150.487 Tm ([*]) Tj 0 g 1 0 0 1 117.075 150.487 Tm (IP:) Tj 0 g 1 0 0 1 143.475 150.487 Tm (advanced) Tj 0 g 1 0 0 1 202.875 150.487 Tm (router) Tj 0 g 1 0 0 1 77.475 138.841 Tm ([*]) Tj 0 g 1 0 0 1 117.075 138.841 Tm (IP:) Tj 0 g 1 0 0 1 143.475 138.841 Tm (policy) Tj 0 g 1 0 0 1 189.675 138.841 Tm (routing) Tj 0 g 1 0 0 1 77.475 127.195 Tm ([*]) Tj 0 g 1 0 0 1 130.275 127.195 Tm (IP:) Tj 0 g 1 0 0 1 156.675 127.195 Tm (use) Tj 0 g 1 0 0 1 183.075 127.195 Tm (netfilter) Tj 0 g 1 0 0 1 249.075 127.195 Tm (MARK) Tj 0 g 1 0 0 1 282.075 127.195 Tm (value) Tj 0 g 1 0 0 1 321.675 127.195 Tm (as) Tj 0 g 1 0 0 1 341.475 127.195 Tm (routing) Tj 0 g 1 0 0 1 394.275 127.195 Tm (key) Tj 0 g 1 0 0 1 77.475 115.549 Tm ([*]) Tj 0 g 1 0 0 1 130.275 115.549 Tm (IP:) Tj 0 g 1 0 0 1 156.675 115.549 Tm (fast) Tj 0 g 1 0 0 1 189.675 115.549 Tm (network) Tj 0 g 1 0 0 1 242.475 115.549 Tm (address) Tj 0 g 1 0 0 1 295.275 115.549 Tm (translation) Tj 0 g 1 0 0 1 77.475 103.903 Tm ([*]) Tj 0 g 1 0 0 1 117.075 103.903 Tm (IP:) Tj 0 g 1 0 0 1 143.475 103.903 Tm (use) Tj 0 g 1 0 0 1 169.875 103.903 Tm (TOS) Tj 0 g 1 0 0 1 196.275 103.903 Tm (value) Tj 0 g 1 0 0 1 235.875 103.903 Tm (as) Tj 0 g 1 0 0 1 255.675 103.903 Tm (routing) Tj 0 g 1 0 0 1 308.475 103.903 Tm (key) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (3) Tj ET endstream endobj 73 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 72 0 R /Annots 74 0 R >> endobj 74 0 obj [ 75 0 R ] endobj 75 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 542.27 189.488 531.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/) /S /URI >> /H /I >> endobj 76 0 obj << /Length 17826 >> stream BT /F3 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (Then,) Tj 0 g 1 0 0 1 103.27 761.722 Tm (under) Tj 0 g 1 0 0 1 136.886 761.722 Tm (the) Tj 0 g 1 0 0 1 156.444 761.722 Tm ("IP:) Tj 0 g 1 0 0 1 178.774 761.722 Tm (Netfilter) Tj 0 g 1 0 0 1 223.39 761.722 Tm (Configuration) Tj 0 g 1 0 0 1 298.553 761.722 Tm (---) Tj 0 g 1 0 0 1 317.825 761.722 Tm (>) Tj 0 g 1 0 0 1 324.249 761.722 Tm (") Tj 0 g 1 0 0 1 332.521 761.722 Tm (menu,) Tj 0 g 1 0 0 1 367.974 761.722 Tm (enable) Tj /F4 11 Tf 0 g 1 0 0 1 405.88 761.722 Tm (every) Tj 0 g 1 0 0 1 437.681 761.722 Tm (option) Tj /F3 11 Tf 0 g 1 0 0 1 474.344 761.722 Tm (so) Tj 0 g 1 0 0 1 490.239 761.722 Tm (that) Tj 0 g 1 0 0 1 70.875 748.547 Tm (we'll) Tj 0 g 1 0 0 1 97.341 748.547 Tm (have) Tj 0 g 1 0 0 1 125.468 748.547 Tm (full) Tj 0 g 1 0 0 1 145.026 748.547 Tm (netfilter) Tj 0 g 1 0 0 1 188.421 748.547 Tm (functionality.) Tj /F1 11 Tf 0 g 1 0 0 1 259.932 748.547 Tm (We) Tj 0 g 1 0 0 1 279.49 748.547 Tm (won't) Tj 0 g 1 0 0 1 307.881 748.547 Tm (use) Tj 0 g 1 0 0 1 328.671 748.547 Tm (all) Tj 0 g 1 0 0 1 342.729 748.547 Tm (the) Tj 0 g 1 0 0 1 361.077 748.547 Tm (netfilter) Tj 0 g 1 0 0 1 400.204 748.547 Tm (features,) Tj 0 g 1 0 0 1 446.063 748.547 Tm (but) Tj 0 g 1 0 0 1 464.411 748.547 Tm (it's) Tj 0 g 1 0 0 1 480.57 748.547 Tm (good) Tj 0 g 1 0 0 1 508.092 748.547 Tm (to) Tj 0 g 1 0 0 1 70.875 735.372 Tm (enable) Tj 0 g 1 0 0 1 106.955 735.372 Tm (them) Tj 0 g 1 0 0 1 134.466 735.372 Tm (so) Tj 0 g 1 0 0 1 149.14 735.372 Tm (that) Tj 0 g 1 0 0 1 170.546 735.372 Tm (you) Tj 0 g 1 0 0 1 191.336 735.372 Tm (can) Tj 0 g 1 0 0 1 212.126 735.372 Tm (do) Tj 0 g 1 0 0 1 227.416 735.372 Tm (some) Tj 0 g 1 0 0 1 257.369 735.372 Tm (experimentation) Tj 0 g 1 0 0 1 338.681 735.372 Tm (later) Tj 0 g 1 0 0 1 363.134 735.372 Tm (on.) Tj ET q 0 G 70.875 714.595 m 524.475 714.595 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 685.171 Tm (Kernel) Tj 0 g 1 0 0 1 127.899 685.171 Tm (configuration,) Tj 0 g 1 0 0 1 240.957 685.171 Tm (Part) Tj 0 g 1 0 0 1 278.973 685.171 Tm (3) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 661.547 Tm (There's) Tj 0 g 1 0 0 1 110.266 661.547 Tm (one) Tj 0 g 1 0 0 1 131.672 661.547 Tm (networking) Tj 0 g 1 0 0 1 187.915 661.547 Tm (option) Tj 0 g 1 0 0 1 220.937 661.547 Tm (under) Tj 0 g 1 0 0 1 252.122 661.547 Tm (the) Tj 0 g 1 0 0 1 270.47 661.547 Tm ("Networking) Tj 0 g 1 0 0 1 332.444 661.547 Tm (options") Tj 0 g 1 0 0 1 374.871 661.547 Tm (category) Tj 0 g 1 0 0 1 420.114 661.547 Tm (that) Tj 0 g 1 0 0 1 441.52 661.547 Tm (you) Tj /F2 11 2000 Tf 0 g 1 0 0 1 462.31 661.547 Tm (shouldn't) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 648.372 Tm (enable:) Tj 0 g 1 0 0 1 110.013 648.372 Tm (explicit) Tj 0 g 1 0 0 1 146.687 648.372 Tm (congestion) Tj 0 g 1 0 0 1 202.941 648.372 Tm (notification.) Tj 0 g 1 0 0 1 261.637 648.372 Tm (Leave) Tj 0 g 1 0 0 1 294.659 648.372 Tm (this) Tj 0 g 1 0 0 1 314.833 648.372 Tm (option) Tj 0 g 1 0 0 1 347.855 648.372 Tm (disabled:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 622.176 Tm ([) Tj 0 g 1 0 0 1 90.675 622.176 Tm (]) Tj 0 g 1 0 0 1 117.075 622.176 Tm (IP:) Tj 0 g 1 0 0 1 143.475 622.176 Tm (TCP) Tj 0 g 1 0 0 1 169.875 622.176 Tm (Explicit) Tj 0 g 1 0 0 1 229.275 622.176 Tm (Congestion) Tj 0 g 1 0 0 1 301.875 622.176 Tm (Notification) Tj 0 g 1 0 0 1 387.675 622.176 Tm (support) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 583.905 Tm (If) Tj 0 g 1 0 0 1 80.049 583.905 Tm (this) Tj 0 g 1 0 0 1 100.223 583.905 Tm (option) Tj 0 g 1 0 0 1 133.245 583.905 Tm (is) Tj 0 g 1 0 0 1 144.245 583.905 Tm (enabled,) Tj 0 g 1 0 0 1 189.499 583.905 Tm (your) Tj 0 g 1 0 0 1 213.952 583.905 Tm (Linux) Tj 0 g 1 0 0 1 243.3 583.905 Tm (machine) Tj 0 g 1 0 0 1 287.927 583.905 Tm (won't) Tj 0 g 1 0 0 1 316.318 583.905 Tm (be) Tj 0 g 1 0 0 1 331.608 583.905 Tm (able) Tj 0 g 1 0 0 1 355.456 583.905 Tm (to) Tj 0 g 1 0 0 1 367.688 583.905 Tm (carry) Tj 0 g 1 0 0 1 395.188 583.905 Tm (on) Tj 0 g 1 0 0 1 410.478 583.905 Tm (network) Tj 0 g 1 0 0 1 70.875 570.73 Tm (communications) Tj 0 g 1 0 0 1 153.397 570.73 Tm (with) Tj 0 g 1 0 0 1 176.013 570.73 Tm (8%) Tj 0 g 1 0 0 1 194.966 570.73 Tm (of) Tj 0 g 1 0 0 1 207.198 570.73 Tm (the) Tj 0 g 1 0 0 1 225.546 570.73 Tm (Internet.) Tj 0 g 1 0 0 1 268.963 570.73 Tm (When) Tj 0 g 1 0 0 1 300.753 570.73 Tm (ECN) Tj 0 g 1 0 0 1 327.032 570.73 Tm (is) Tj 0 g 1 0 0 1 338.032 570.73 Tm (enabled,) Tj 0 g 1 0 0 1 383.286 570.73 Tm (some) Tj 0 g 1 0 0 1 413.239 570.73 Tm (packets) Tj 0 g 1 0 0 1 454.203 570.73 Tm (that) Tj 0 g 1 0 0 1 475.609 570.73 Tm (your) Tj 0 g 1 0 0 1 70.875 557.555 Tm (Linux) Tj 0 g 1 0 0 1 100.223 557.555 Tm (box) Tj 0 g 1 0 0 1 121.013 557.555 Tm (sends) Tj 0 g 1 0 0 1 153.419 557.555 Tm (out) Tj 0 g 1 0 0 1 171.767 557.555 Tm (will) Tj 0 g 1 0 0 1 190.093 557.555 Tm (have) Tj 0 g 1 0 0 1 216.999 557.555 Tm (the) Tj 0 g 1 0 0 1 235.347 557.555 Tm (ECN) Tj 0 g 1 0 0 1 261.626 557.555 Tm (bit) Tj 0 g 1 0 0 1 276.3 557.555 Tm (set;) Tj 0 g 1 0 0 1 297.09 557.555 Tm (however,) Tj 0 g 1 0 0 1 344.775 557.555 Tm (this) Tj 0 g 1 0 0 1 364.949 557.555 Tm (bit) Tj 0 g 1 0 0 1 379.623 557.555 Tm (freaks) Tj 0 g 1 0 0 1 412.634 557.555 Tm (out) Tj 0 g 1 0 0 1 430.982 557.555 Tm (a) Tj 0 g 1 0 0 1 440.156 557.555 Tm (number) Tj 0 g 1 0 0 1 480.504 557.555 Tm (of) Tj 0 g 1 0 0 1 70.875 544.38 Tm (Internet) Tj 0 g 1 0 0 1 111.234 544.38 Tm (routers,) Tj 0 g 1 0 0 1 151.582 544.38 Tm (so) Tj 0 g 1 0 0 1 166.256 544.38 Tm (it's) Tj 0 g 1 0 0 1 182.415 544.38 Tm (very) Tj 0 g 1 0 0 1 206.252 544.38 Tm (important) Tj 0 g 1 0 0 1 255.158 544.38 Tm (that) Tj 0 g 1 0 0 1 276.564 544.38 Tm (ECN) Tj 0 g 1 0 0 1 302.843 544.38 Tm (is) Tj 0 g 1 0 0 1 313.843 544.38 Tm (disabled.) Tj 0 g 1 0 0 1 70.875 517.205 Tm (OK,) Tj 0 g 1 0 0 1 92.886 517.205 Tm (now) Tj 0 g 1 0 0 1 116.118 517.205 Tm (that) Tj 0 g 1 0 0 1 137.524 517.205 Tm (the) Tj 0 g 1 0 0 1 155.872 517.205 Tm (kernel's) Tj 0 g 1 0 0 1 196.484 517.205 Tm (configured) Tj 0 g 1 0 0 1 250.901 517.205 Tm (correctly) Tj 0 g 1 0 0 1 295.517 517.205 Tm (for) Tj 0 g 1 0 0 1 311.412 517.205 Tm (our) Tj 0 g 1 0 0 1 330.365 517.205 Tm (needs,) Tj 0 g 1 0 0 1 366.445 517.205 Tm (compile) Tj 0 g 1 0 0 1 407.398 517.205 Tm (a) Tj 0 g 1 0 0 1 416.572 517.205 Tm (new) Tj 0 g 1 0 0 1 439.804 517.205 Tm (one,) Tj 0 g 1 0 0 1 464.268 517.205 Tm (install) Tj 0 g 1 0 0 1 495.442 517.205 Tm (it,) Tj 0 g 1 0 0 1 70.875 504.03 Tm (and) Tj 0 g 1 0 0 1 92.281 504.03 Tm (reboot.) Tj 0 g 1 0 0 1 129.582 504.03 Tm (Time) Tj 0 g 1 0 0 1 157.082 504.03 Tm (to) Tj 0 g 1 0 0 1 169.314 504.03 Tm (start) Tj 0 g 1 0 0 1 193.767 504.03 Tm (playing) Tj 0 g 1 0 0 1 231.673 504.03 Tm (with) Tj 0 g 1 0 0 1 254.289 504.03 Tm (netfilter) Tj 0 g 1 0 0 1 293.416 504.03 Tm (:\)) Tj ET q 0 G 70.875 483.253 m 524.475 483.253 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 453.829 Tm (Firewall) Tj 0 g 1 0 0 1 137.871 453.829 Tm (design) Tj 0 g 1 0 0 1 195.903 453.829 Tm (basics) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 430.205 Tm (In) Tj 0 g 1 0 0 1 83.107 430.205 Tm (putting) Tj 0 g 1 0 0 1 119.187 430.205 Tm (together) Tj 0 g 1 0 0 1 162.604 430.205 Tm (our) Tj 0 g 1 0 0 1 181.557 430.205 Tm (firewall,) Tj 0 g 1 0 0 1 221.894 430.205 Tm (the) Tj 0 g 1 0 0 1 240.242 430.205 Tm ("iptables") Tj 0 g 1 0 0 1 289.016 430.205 Tm (command) Tj 0 g 1 0 0 1 340.364 430.205 Tm (is) Tj 0 g 1 0 0 1 351.364 430.205 Tm (our) Tj 0 g 1 0 0 1 370.317 430.205 Tm (friend.) Tj 0 g 1 0 0 1 403.944 430.205 Tm (It's) Tj 0 g 1 0 0 1 420.719 430.205 Tm (what) Tj 0 g 1 0 0 1 447.009 430.205 Tm (we) Tj 0 g 1 0 0 1 464.125 430.205 Tm (use) Tj 0 g 1 0 0 1 484.915 430.205 Tm (to) Tj 0 g 1 0 0 1 70.875 417.03 Tm (interact) Tj 0 g 1 0 0 1 110.002 417.03 Tm (with) Tj 0 g 1 0 0 1 132.618 417.03 Tm (the) Tj 0 g 1 0 0 1 150.966 417.03 Tm (network) Tj 0 g 1 0 0 1 192.535 417.03 Tm (packet) Tj 0 g 1 0 0 1 227.999 417.03 Tm (filtering) Tj 0 g 1 0 0 1 266.51 417.03 Tm (rules) Tj 0 g 1 0 0 1 293.405 417.03 Tm (in) Tj 0 g 1 0 0 1 305.021 417.03 Tm (the) Tj 0 g 1 0 0 1 323.369 417.03 Tm (kernel.) Tj 0 g 1 0 0 1 359.438 417.03 Tm (We'll) Tj 0 g 1 0 0 1 385.981 417.03 Tm (use) Tj 0 g 1 0 0 1 406.771 417.03 Tm (the) Tj 0 g 1 0 0 1 425.119 417.03 Tm ("iptables") Tj 0 g 1 0 0 1 473.893 417.03 Tm (command) Tj 0 g 1 0 0 1 70.875 403.855 Tm (to) Tj 0 g 1 0 0 1 83.107 403.855 Tm (create) Tj 0 g 1 0 0 1 116.734 403.855 Tm (new) Tj 0 g 1 0 0 1 139.966 403.855 Tm (rules,) Tj 0 g 1 0 0 1 169.919 403.855 Tm (list) Tj 0 g 1 0 0 1 186.419 403.855 Tm (existing) Tj 0 g 1 0 0 1 226.767 403.855 Tm (rules,) Tj 0 g 1 0 0 1 256.72 403.855 Tm (flush) Tj 0 g 1 0 0 1 283.01 403.855 Tm (rules,) Tj 0 g 1 0 0 1 312.963 403.855 Tm (and) Tj 0 g 1 0 0 1 334.369 403.855 Tm (set) Tj 0 g 1 0 0 1 352.101 403.855 Tm (default) Tj 0 g 1 0 0 1 388.181 403.855 Tm (packet) Tj 0 g 1 0 0 1 423.645 403.855 Tm (handling) Tj 0 g 1 0 0 1 468.283 403.855 Tm (policies.) Tj 0 g 1 0 0 1 70.875 390.68 Tm (This) Tj 0 g 1 0 0 1 94.712 390.68 Tm (means) Tj 0 g 1 0 0 1 130.781 390.68 Tm (that) Tj 0 g 1 0 0 1 152.187 390.68 Tm (to) Tj 0 g 1 0 0 1 164.419 390.68 Tm (create) Tj 0 g 1 0 0 1 198.046 390.68 Tm (our) Tj 0 g 1 0 0 1 216.999 390.68 Tm (firewall,) Tj 0 g 1 0 0 1 257.336 390.68 Tm (we're) Tj 0 g 1 0 0 1 286.332 390.68 Tm (going) Tj 0 g 1 0 0 1 316.296 390.68 Tm (to) Tj 0 g 1 0 0 1 328.528 390.68 Tm (enter) Tj 0 g 1 0 0 1 356.655 390.68 Tm (a) Tj 0 g 1 0 0 1 365.829 390.68 Tm (series) Tj 0 g 1 0 0 1 398.224 390.68 Tm (of) Tj 0 g 1 0 0 1 410.456 390.68 Tm (iptables) Tj 0 g 1 0 0 1 451.42 390.68 Tm (commands,) Tj 0 g 1 0 0 1 70.875 377.505 Tm (and) Tj 0 g 1 0 0 1 92.281 377.505 Tm (here's) Tj 0 g 1 0 0 1 124.951 377.505 Tm (the) Tj 0 g 1 0 0 1 143.299 377.505 Tm (first) Tj 0 g 1 0 0 1 164.078 377.505 Tm (one) Tj 0 g 1 0 0 1 185.484 377.505 Tm (we're) Tj 0 g 1 0 0 1 214.48 377.505 Tm (going) Tj 0 g 1 0 0 1 244.444 377.505 Tm (to) Tj 0 g 1 0 0 1 256.676 377.505 Tm (take) Tj 0 g 1 0 0 1 280.524 377.505 Tm (a) Tj 0 g 1 0 0 1 289.698 377.505 Tm (look) Tj 0 g 1 0 0 1 312.93 377.505 Tm (at) Tj 0 g 1 0 0 1 325.162 377.505 Tm (\(please) Tj 0 g 1 0 0 1 364.289 377.505 Tm (don't) Tj 0 g 1 0 0 1 390.854 377.505 Tm (type) Tj 0 g 1 0 0 1 414.702 377.505 Tm (this) Tj 0 g 1 0 0 1 434.876 377.505 Tm (in) Tj 0 g 1 0 0 1 446.492 377.505 Tm (just) Tj 0 g 1 0 0 1 466.666 377.505 Tm (yet!\)...) Tj ET q 0 G 70.875 356.728 m 524.475 356.728 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 327.304 Tm (Firewall) Tj 0 g 1 0 0 1 137.871 327.304 Tm (design) Tj 0 g 1 0 0 1 195.903 327.304 Tm (basics,) Tj 0 g 1 0 0 1 256.923 327.304 Tm (continued) Tj /F9 11 Tf 0 g 1 0 0 1 70.875 304.659 Tm (#) Tj 0 g 1 0 0 1 84.075 304.659 Tm (iptables) Tj 0 g 1 0 0 1 143.475 304.659 Tm (-P) Tj 0 g 1 0 0 1 163.275 304.659 Tm (INPUT) Tj 0 g 1 0 0 1 202.875 304.659 Tm (DROP) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 266.388 Tm (Y 2000 ou're) Tj 0 g 1 0 0 1 105.382 266.388 Tm (looking) Tj 0 g 1 0 0 1 143.288 266.388 Tm (at) Tj 0 g 1 0 0 1 155.52 266.388 Tm (an) Tj 0 g 1 0 0 1 170.81 266.388 Tm (almost) Tj 0 g 1 0 0 1 206.263 266.388 Tm ("perfect") Tj 0 g 1 0 0 1 250.758 266.388 Tm (firewall.) Tj 0 g 1 0 0 1 291.095 266.388 Tm (If) Tj 0 g 1 0 0 1 300.269 266.388 Tm (you) Tj 0 g 1 0 0 1 321.059 266.388 Tm (type) Tj 0 g 1 0 0 1 344.907 266.388 Tm (in) Tj 0 g 1 0 0 1 356.523 266.388 Tm (this) Tj 0 g 1 0 0 1 376.697 266.388 Tm (command,) Tj 0 g 1 0 0 1 431.103 266.388 Tm (you'll) Tj 0 g 1 0 0 1 458.878 266.388 Tm (be) Tj 0 g 1 0 0 1 474.168 266.388 Tm (incredibly) Tj 0 g 1 0 0 1 70.875 253.213 Tm (well) Tj 0 g 1 0 0 1 92.875 253.213 Tm (protected) Tj 0 g 1 0 0 1 141.792 253.213 Tm (against) Tj 0 g 1 0 0 1 180.314 253.213 Tm (any) Tj 0 g 1 0 0 1 201.104 253.213 Tm (form) Tj 0 g 1 0 0 1 226.162 253.213 Tm (of) Tj 0 g 1 0 0 1 238.394 253.213 Tm (incoming) Tj 0 g 1 0 0 1 285.463 253.213 Tm (malicious) Tj 0 g 1 0 0 1 334.358 253.213 Tm (attack.) Tj 0 g 1 0 0 1 369.822 253.213 Tm (That's) Tj 0 g 1 0 0 1 402.492 253.213 Tm (because) Tj 0 g 1 0 0 1 447.13 253.213 Tm (this) Tj 0 g 1 0 0 1 467.304 253.213 Tm (command) Tj 0 g 1 0 0 1 70.875 240.038 Tm (tells) Tj 0 g 1 0 0 1 93.491 240.038 Tm (the) Tj 0 g 1 0 0 1 111.839 240.038 Tm (kernel) Tj 0 g 1 0 0 1 144.85 240.038 Tm (to) Tj 0 g 1 0 0 1 157.082 240.038 Tm (drop) Tj 0 g 1 0 0 1 182.151 240.038 Tm (all) Tj 0 g 1 0 0 1 196.209 240.038 Tm (incoming) Tj 0 g 1 0 0 1 243.278 240.038 Tm (network) Tj 0 g 1 0 0 1 284.847 240.038 Tm (packets.) Tj 0 g 1 0 0 1 328.869 240.038 Tm (While) Tj 0 g 1 0 0 1 359.427 240.038 Tm (this) Tj 0 g 1 0 0 1 379.601 240.038 Tm (firewall) Tj 0 g 1 0 0 1 416.88 240.038 Tm (is) Tj 0 g 1 0 0 1 427.88 240.038 Tm (extremely) Tj 0 g 1 0 0 1 478.612 240.038 Tm (secure,) Tj 0 g 1 0 0 1 70.875 226.863 Tm (it's) Tj 0 g 1 0 0 1 87.034 226.863 Tm (a) Tj 0 g 1 0 0 1 96.208 226.863 Tm (bit) Tj 0 g 1 0 0 1 110.882 226.863 Tm (silly.) Tj 0 g 1 0 0 1 135.324 226.863 Tm (But) Tj 0 g 1 0 0 1 154.893 226.863 Tm (before) Tj 0 g 1 0 0 1 189.136 226.863 Tm (moving) Tj 0 g 1 0 0 1 227.647 226.863 Tm (on,) Tj 0 g 1 0 0 1 245.995 226.863 Tm (let's) Tj 0 g 1 0 0 1 268.27 226.863 Tm (take) Tj 0 g 1 0 0 1 292.118 226.863 Tm (a) Tj 0 g 1 0 0 1 301.292 226.863 Tm (look) Tj 0 g 1 0 0 1 324.524 226.863 Tm (at) Tj 0 g 1 0 0 1 336.756 226.863 Tm (exactly) Tj 0 g 1 0 0 1 374.046 226.863 Tm (how) Tj 0 g 1 0 0 1 397.278 226.863 Tm (this) Tj 0 g 1 0 0 1 417.452 226.863 Tm (command) Tj 0 g 1 0 0 1 468.8 226.863 Tm (does) Tj 0 g 1 0 0 1 495.706 226.863 Tm (what) Tj 0 g 1 0 0 1 70.875 213.688 Tm (it) Tj 0 g 1 0 0 1 79.433 213.688 Tm (does.) Tj ET q 0 G 70.875 192.911 m 524.475 192.911 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 163.487 Tm (Setting) Tj 0 g 1 0 0 1 131.913 163.487 Tm (chain) Tj 0 g 1 0 0 1 179.937 163.487 Tm (policy) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 139.863 Tm (An) Tj 0 g 1 0 0 1 87.386 139.863 Tm ("iptables) Tj 0 g 1 0 0 1 132.255 139.863 Tm (-P") Tj 0 g 1 0 0 1 152.979 139.863 Tm (command) Tj 0 g 1 0 0 1 204.327 139.863 Tm (is) Tj 0 g 1 0 0 1 215.327 139.863 Tm (used) Tj 0 g 1 0 0 1 242.233 139.863 Tm (to) Tj 0 g 1 0 0 1 254.465 139.863 Tm (set) Tj 0 g 1 0 0 1 272.197 139.863 Tm (the) Tj 0 g 1 0 0 1 290.545 139.863 Tm (default) Tj /F2 11 Tf 0 g 1 0 0 1 326.625 139.863 Tm (policy) Tj /F1 11 Tf 0 g 1 0 0 1 357.799 139.863 Tm (for) Tj 0 g 1 0 0 1 373.694 139.863 Tm (a) Tj 0 g 1 0 0 1 382.868 139.863 Tm (chain) Tj 0 g 1 0 0 1 412.216 139.863 Tm (of) Tj 0 g 1 0 0 1 424.448 139.863 Tm (packet) Tj 0 g 1 0 0 1 459.912 139.863 Tm (filtering) Tj 0 g 1 0 0 1 70.875 126.688 Tm (rules.) Tj 0 g 1 0 0 1 100.828 126.688 Tm (In) Tj 0 g 1 0 0 1 113.06 126.688 Tm (this) Tj 0 g 1 0 0 1 133.234 126.688 Tm (example,) Tj 0 g 1 0 0 1 180.919 126.688 Tm (iptables) Tj 0 g 1 0 0 1 221.883 126.688 Tm (-P) Tj 0 g 1 0 0 1 238.702 126.688 Tm (is) Tj 0 g 1 0 0 1 249.702 126.688 Tm (used) Tj 0 g 1 0 0 1 276.608 126.688 Tm (to) Tj 0 g 1 0 0 1 288.84 126.688 Tm (set) Tj 0 g 1 0 0 1 306.572 126.688 Tm (the) Tj 0 g 1 0 0 1 324.92 126.688 Tm (default) Tj 0 g 1 0 0 1 361.0 126.688 Tm (policy) Tj 0 g 1 0 0 1 392.174 126.688 Tm (for) Tj 0 g 1 0 0 1 408.069 126.688 Tm (the) Tj 0 g 1 0 0 1 426.417 126.688 Tm (INPUT) Tj 0 g 1 0 0 1 462.475 126.688 Tm (chain,) Tj 0 g 1 0 0 1 494.881 126.688 Tm (a) Tj 0 g 1 0 0 1 70.875 113.513 Tm (built-in) Tj 0 g 1 0 0 1 109.089 113.513 Tm (chain) Tj 0 g 1 0 0 1 138.437 113.513 Tm (of) Tj 0 g 1 0 0 1 150.669 113.513 Tm (rules) Tj 0 g 1 0 0 1 177.564 113.513 Tm (that's) Tj 0 g 1 0 0 1 206.571 113.513 Tm (applied) Tj 0 g 1 0 0 1 245.093 113.513 Tm (to) Tj 0 g 1 0 0 1 257.325 113.513 Tm (every) Tj 0 g 1 0 0 1 287.278 113.513 Tm (incoming) Tj 0 g 1 0 0 1 334.347 113.513 Tm (packet.) Tj 0 g 1 0 0 1 372.869 113.513 Tm (By) Tj 0 g 1 0 0 1 388.764 113.513 Tm (setting) Tj 0 g 1 0 0 1 424.228 113.513 Tm (the) Tj 0 g 1 0 0 1 442.576 113.513 Tm (default) Tj 0 g 1 0 0 1 478.656 113.513 Tm (policy) Tj 0 g 1 0 0 1 509.83 113.513 Tm (to) Tj 0 g 1 0 0 1 70.875 100.338 Tm (DROP,) Tj 0 g 1 0 0 1 108.77 100.338 Tm (we) Tj 0 g 1 0 0 1 125.886 100.338 Tm (tell) Tj 0 g 1 0 0 1 143.002 100.338 Tm (the) Tj 0 g 1 0 0 1 161.35 100.338 Tm (kernel) Tj 0 g 1 0 0 1 194.361 100.338 Tm (that) Tj 0 g 1 0 0 1 215.767 100.338 Tm (any) Tj 0 g 1 0 0 1 236.557 100.338 Tm (packets) Tj 0 g 1 0 0 1 277.521 100.338 Tm (that) Tj 0 g 1 0 0 1 298.927 100.338 Tm (reach) Tj 0 g 1 0 0 1 329.496 100.338 Tm (the) Tj 0 g 1 0 0 1 347.844 100.338 Tm (end) Tj 0 g 1 0 0 1 369.25 100.338 Tm (of) Tj 0 g 1 0 0 1 381.482 100.338 Tm (the) Tj 0 g 1 0 0 1 399.83 100.338 Tm (INPUT) Tj 0 g 1 0 0 1 435.888 100.338 Tm (rule) Tj 0 g 1 0 0 1 457.283 100.338 Tm (chain) Tj 0 g 1 0 0 1 486.631 100.338 Tm (should) Tj 0 g 1 0 0 1 70.875 87.163 Tm (be) Tj 0 g 1 0 0 1 86.165 87.163 Tm (dropped) Tj 0 g 1 0 0 1 129.582 87.163 Tm (\(that) Tj 0 g 1 0 0 1 154.651 87.163 Tm (is,) Tj 0 g 1 0 0 1 168.709 87.163 Tm (discarded\).) Tj 0 g 1 0 0 1 226.173 87.163 Tm (And,) Tj 0 g 1 0 0 1 251.858 87.163 Tm (since) Tj 0 g 1 0 0 1 280.59 87.163 Tm (we) Tj 0 g 1 0 0 1 297.706 87.163 Tm (haven't) Tj 0 g 1 0 0 1 335.887 87.163 Tm (added) Tj 0 g 1 0 0 1 369.525 87.163 Tm (any) Tj 0 g 1 0 0 1 390.315 87.163 Tm (rules) Tj 0 g 1 0 0 1 417.21 87.163 Tm (to) Tj 0 g 1 0 0 1 429.442 87.163 Tm (the) Tj 0 g 1 0 0 1 447.79 87.163 Tm (INPUT) Tj 0 g 1 0 0 1 483.848 87.163 Tm (chain,) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (4) Tj ET endstream endobj 77 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 76 0 R >> endobj 78 0 obj << /Length 3606 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (all) Tj 0 g 1 0 0 1 84.933 761.722 Tm (packets) Tj 0 g 1 0 0 1 125.897 761.722 Tm (reach) Tj 0 g 1 0 0 1 156.466 761.722 Tm (the) Tj 0 g 1 0 0 1 174.814 761.722 Tm (end) Tj 0 g 1 0 0 1 196.22 761.722 Tm (of) Tj 0 g 1 0 0 1 208.452 761.722 Tm (the) Tj 0 g 1 0 0 1 226.8 761.722 Tm (chain,) Tj 0 g 1 0 0 1 259.206 761.722 Tm (and) Tj 0 g 1 0 0 1 280.612 761.722 Tm (all) Tj 0 g 1 0 0 1 294.67 761.722 Tm (packets) Tj 0 g 1 0 0 1 335.634 761.722 Tm (are) Tj 0 g 1 0 0 1 354.587 761.722 Tm (dropped.) Tj ET q 0 G 70.875 740.945 m 524.475 740.945 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 711.521 Tm (Setting) Tj 0 g 1 0 0 1 131.913 711.521 Tm (chain) Tj 0 g 1 0 0 1 179.937 711.521 Tm (policy,) Tj 0 g 1 0 0 1 235.953 711.521 Tm (continued) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 687.897 Tm (Again,) Tj 0 g 1 0 0 1 105.118 687.897 Tm (by) Tj 0 g 1 0 0 1 119.792 687.897 Tm (itself) Tj 2000 0 g 1 0 0 1 145.466 687.897 Tm (this) Tj 0 g 1 0 0 1 165.64 687.897 Tm (command) Tj 0 g 1 0 0 1 216.988 687.897 Tm (is) Tj 0 g 1 0 0 1 227.988 687.897 Tm (totally) Tj 0 g 1 0 0 1 259.778 687.897 Tm (useless.) Tj 0 g 1 0 0 1 303.184 687.897 Tm (However,) Tj 0 g 1 0 0 1 352.695 687.897 Tm (it) Tj 0 g 1 0 0 1 361.253 687.897 Tm (demonstrates) Tj 0 g 1 0 0 1 430.949 687.897 Tm (a) Tj 0 g 1 0 0 1 440.123 687.897 Tm (good) Tj 0 g 1 0 0 1 467.645 687.897 Tm (strategy) Tj 0 g 1 0 0 1 509.83 687.897 Tm (for) Tj 0 g 1 0 0 1 70.875 674.722 Tm (firewall) Tj 0 g 1 0 0 1 108.154 674.722 Tm (design.) Tj 0 g 1 0 0 1 146.676 674.722 Tm (We'll) Tj 0 g 1 0 0 1 173.219 674.722 Tm (start) Tj 0 g 1 0 0 1 197.672 674.722 Tm (by) Tj 0 g 1 0 0 1 212.346 674.722 Tm (dropping) Tj 0 g 1 0 0 1 258.205 674.722 Tm (all) Tj 0 g 1 0 0 1 272.263 674.722 Tm (packets) Tj 0 g 1 0 0 1 313.227 674.722 Tm (by) Tj 0 g 1 0 0 1 327.901 674.722 Tm (default,) Tj 0 g 1 0 0 1 367.039 674.722 Tm (and) Tj 0 g 1 0 0 1 388.445 674.722 Tm (then) Tj 0 g 1 0 0 1 412.909 674.722 Tm (gradually) Tj 0 g 1 0 0 1 460.594 674.722 Tm (start) Tj 0 g 1 0 0 1 485.047 674.722 Tm (opening) Tj 0 g 1 0 0 1 70.875 661.547 Tm (up) Tj 0 g 1 0 0 1 86.165 661.547 Tm (our) Tj 0 g 1 0 0 1 105.118 661.547 Tm (firewall) Tj 0 g 1 0 0 1 142.397 661.547 Tm (so) Tj 0 g 1 0 0 1 157.071 661.547 Tm (that) Tj 0 g 1 0 0 1 178.477 661.547 Tm (it) Tj 0 g 1 0 0 1 187.035 661.547 Tm (meets) Tj 0 g 1 0 0 1 220.046 661.547 Tm (our) Tj 0 g 1 0 0 1 238.999 661.547 Tm (needs.) Tj 0 g 1 0 0 1 275.079 661.547 Tm (This) Tj 0 g 1 0 0 1 298.916 661.547 Tm (will) Tj 0 g 1 0 0 1 317.242 661.547 Tm (ensure) Tj 0 g 1 0 0 1 353.927 661.547 Tm (that) Tj 0 g 1 0 0 1 375.333 661.547 Tm (our) Tj 0 g 1 0 0 1 394.286 661.547 Tm (firewall) Tj 0 g 1 0 0 1 431.565 661.547 Tm (is) Tj 0 g 1 0 0 1 442.565 661.547 Tm (as) Tj 0 g 1 0 0 1 457.239 661.547 Tm (secure) Tj 0 g 1 0 0 1 493.308 661.547 Tm (as) Tj 0 g 1 0 0 1 70.875 648.372 Tm (possible.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (5) Tj ET endstream endobj 79 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 78 0 R >> endobj 80 0 obj << /Length 17137 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (3.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (Defining) Tj 0 g 1 0 0 1 226.953 756.696 Tm (rules) Tj 0 g 1 0 0 1 70.875 725.046 Tm (A) Tj 0 g 1 0 0 1 87.885 725.046 Tm (\(small\)) Tj 0 g 1 0 0 1 146.871 725.046 Tm (improvement) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (In) Tj 0 g 1 0 0 1 83.107 701.422 Tm (this) Tj 0 g 1 0 0 1 103.281 701.422 Tm (example,) Tj 0 g 1 0 0 1 150.966 701.422 Tm (let's) Tj 0 g 1 0 0 1 173.241 701.422 Tm (assume) Tj 0 g 1 0 0 1 214.81 701.422 Tm (that) Tj 0 g 1 0 0 1 236.216 701.422 Tm (we're) Tj 0 g 1 0 0 1 265.212 701.422 Tm (designing) Tj 0 g 1 0 0 1 315.35 701.422 Tm (a) Tj 0 g 1 0 0 1 324.524 701.422 Tm (firewall) Tj 0 g 1 0 0 1 361.803 701.422 Tm (for) Tj 0 g 1 0 0 1 377.698 701.422 Tm (a) Tj 0 g 1 0 0 1 386.872 701.422 Tm (machine) Tj 0 g 1 0 0 1 431.499 701.422 Tm (with) Tj 0 g 1 0 0 1 454.115 701.422 Tm (two) Tj 0 g 1 0 0 1 474.289 701.422 Tm (network) Tj 0 g 1 0 0 1 70.875 688.247 Tm (interfaces,) Tj 0 g 1 0 0 1 124.676 688.247 Tm (eth0) Tj 0 g 1 0 0 1 149.14 688.247 Tm (and) Tj 0 g 1 0 0 1 170.546 688.247 Tm (eth1.) Tj 0 g 1 0 0 1 198.068 688.247 Tm (The) Tj 0 g 1 0 0 1 220.079 688.247 Tm (eth0) Tj 0 g 1 0 0 1 244.543 688.247 Tm (network) Tj 0 g 1 0 0 1 286.112 688.247 Tm (card) Tj 0 g 1 0 0 1 310.565 688.247 Tm (is) Tj 0 g 1 0 0 1 321.565 688.247 Tm (connected) Tj 0 g 1 0 0 1 375.377 688.247 Tm (to) Tj 0 g 1 0 0 1 387.609 688.247 Tm (our) Tj 0 g 1 0 0 1 406.562 688.247 Tm (LAN,) Tj 0 g 1 0 0 1 434.073 688.247 Tm (while) Tj 0 g 1 0 0 1 462.189 688.247 Tm (the) Tj 0 g 1 0 0 1 480.537 688.247 Tm (eth1) Tj 0 g 1 0 0 1 70.875 675.072 Tm (network) Tj 0 g 1 0 0 1 112.444 675.072 Tm (card) Tj 0 g 1 0 0 1 136.897 675.072 Tm (is) Tj 0 g 1 0 0 1 147.897 675.072 Tm (attached) Tj 0 g 1 0 0 1 193.151 675.072 Tm (to) Tj 0 g 1 0 0 1 205.383 675.072 Tm (our) Tj 0 g 1 0 0 1 224.336 675.072 Tm (DSL) Tj 0 g 1 0 0 1 248.789 675.072 Tm (router,) Tj 0 g 1 0 0 1 283.637 675.072 Tm (our) Tj 0 g 1 0 0 1 302.59 675.072 Tm (connection) Tj 0 g 1 0 0 1 358.844 675.072 Tm (to) Tj 0 g 1 0 0 1 371.076 675.072 Tm (the) Tj 0 g 1 0 0 1 389.424 675.072 Tm (Internet.) Tj 0 g 1 0 0 1 432.841 675.072 Tm (For) Tj 0 g 1 0 0 1 452.399 675.072 Tm (such) Tj 0 g 1 0 0 1 478.689 675.072 Tm (a) Tj 0 g 1 0 0 1 70.875 661.897 Tm (situation,) Tj 0 g 1 0 0 1 117.955 661.897 Tm (we) Tj 0 g 1 0 0 1 135.071 661.897 Tm (could) Tj 0 g 1 0 0 1 164.419 661.897 Tm (improve) Tj 0 g 1 0 0 1 206.593 661.897 Tm (our) Tj 0 g 1 0 0 1 225.546 661.897 Tm ("ultimate) Tj 0 g 1 0 0 1 271.02 661.897 Tm (firewall") Tj 0 g 1 0 0 1 312.204 661.897 Tm (by) Tj 0 g 1 0 0 1 326.878 661.897 Tm (adding) Tj 0 g 1 0 0 1 362.958 661.897 Tm (one) Tj 0 g 1 0 0 1 384.364 661.897 Tm (more) Tj 0 g 1 0 0 1 412.48 661.897 Tm (line:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 635.701 Tm (iptables) Tj 0 g 1 0 0 1 136.875 635.701 Tm (-P) Tj 0 g 1 0 0 1 156.675 635.701 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 635.701 Tm (DROP) Tj 0 g 1 0 0 1 77.475 624.055 Tm (iptables) Tj 0 g 1 0 0 1 136.875 624.055 Tm (-A) Tj 0 g 1 0 0 1 156.675 624.055 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 624.055 Tm (-i) Tj 0 g 1 0 0 1 216.075 624.055 Tm (!) Tj 0 g 1 0 0 1 229.275 624.055 Tm (eth1) Tj 0 g 1 0 0 1 262.275 624.055 Tm (-j) Tj 0 g 1 0 0 1 282.075 624.055 Tm (ACCEPT) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 585.784 Tm (This) Tj 0 g 1 0 0 1 94.712 585.784 Tm (additional) Tj 0 g 1 0 0 1 144.85 585.784 Tm ("iptables) Tj 0 g 1 0 0 1 189.719 585.784 Tm (-A") Tj 0 g 1 0 0 1 210.443 585.784 Tm (line) Tj 0 g 1 0 0 1 230.617 585.784 Tm (adds) Tj 0 g 1 0 0 1 257.523 585.784 Tm (a) Tj 0 g 1 0 0 1 266.697 585.784 Tm (new) Tj 0 g 1 0 0 1 289.929 585.784 Tm (packet) Tj 0 g 1 0 0 1 325.393 585.784 Tm (filtering) Tj 0 g 1 0 0 1 363.904 585.784 Tm (rule) Tj 0 g 1 0 0 1 385.299 585.784 Tm (to) Tj 0 g 1 0 0 1 397.531 585.784 Tm (the) Tj 0 g 1 0 0 1 415.879 585.784 Tm (end) Tj 0 g 1 0 0 1 437.285 585.784 Tm (of) Tj 0 g 1 0 0 1 449.517 585.784 Tm (our) Tj 0 g 1 0 0 1 468.47 585.784 Tm (INPUT) Tj 0 g 1 0 0 1 70.875 572.609 Tm (chain.) Tj 0 g 1 0 0 1 103.281 572.609 Tm (After) Tj 0 g 1 0 0 1 129.571 572.609 Tm (this) Tj 0 g 1 0 0 1 149.745 572.609 Tm (rule) Tj 0 g 1 0 0 1 171.14 572.609 Tm (is) Tj 0 g 1 0 0 1 182.14 572.609 Tm (added,) Tj 0 g 1 0 0 1 218.836 572.609 Tm (our) Tj 0 g 1 0 0 1 237.789 572.609 Tm (INPUT) Tj 0 g 1 0 0 1 273.847 572.609 Tm (chain) Tj 0 g 1 0 0 1 303.195 572.609 Tm (consists) Tj 0 g 1 0 0 1 345.985 572.609 Tm (of) Tj 0 g 1 0 0 1 358.217 572.609 Tm (a) Tj 0 g 1 0 0 1 367.391 572.609 Tm (single) Tj 0 g 1 0 0 1 399.181 572.609 Tm (rule) Tj 0 g 1 0 0 1 420.576 572.609 Tm (and) Tj 0 g 1 0 0 1 441.982 572.609 Tm (a) Tj 0 g 1 0 0 1 70.875 559.434 Tm (drop-by-default) Tj 0 g 1 0 0 1 153.43 559.434 Tm (policy.) Tj 0 g 1 0 0 1 187.662 559.434 Tm (Now,) Tj 0 g 1 0 0 1 215.778 559.434 Tm (let's) Tj 0 g 1 0 0 1 238.053 559.434 Tm (take) Tj 0 g 1 0 0 1 261.901 559.434 Tm (a) Tj 0 g 1 0 0 1 271.075 559.434 Tm (look) Tj 0 g 1 0 0 1 294.307 559.434 Tm (at) Tj 0 g 1 0 0 1 306.539 559.434 Tm (what) Tj 0 g 1 0 0 1 332.829 559.434 Tm (our) Tj 0 g 1 0 0 1 351.782 559.434 Tm (semi-complete) Tj 0 g 1 0 0 1 429.112 559.434 Tm (firewall) Tj 0 g 1 0 0 1 466.391 559.434 Tm (does.) Tj ET q 0 G 70.875 538.657 m 524.475 538.657 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 509.233 Tm (Following) 2000 Tj 0 g 1 0 0 1 151.893 509.233 Tm (the) Tj 0 g 1 0 0 1 181.917 509.233 Tm (INPUT) Tj 0 g 1 0 0 1 240.921 509.233 Tm (chain) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 485.609 Tm (When) Tj 0 g 1 0 0 1 102.665 485.609 Tm (a) Tj 0 g 1 0 0 1 111.839 485.609 Tm (packet) Tj 0 g 1 0 0 1 147.303 485.609 Tm (comes) Tj 0 g 1 0 0 1 182.756 485.609 Tm (in) Tj 0 g 1 0 0 1 194.372 485.609 Tm (on) Tj 0 g 1 0 0 1 209.662 485.609 Tm (any) Tj 0 g 1 0 0 1 230.452 485.609 Tm (interface) Tj 0 g 1 0 0 1 275.695 485.609 Tm (\(lo,) Tj 0 g 1 0 0 1 294.032 485.609 Tm (eth0,) Tj 0 g 1 0 0 1 321.554 485.609 Tm (or) Tj 0 g 1 0 0 1 334.391 485.609 Tm (eth1\),) Tj 0 g 1 0 0 1 365.576 485.609 Tm (the) Tj 0 g 1 0 0 1 383.924 485.609 Tm (netfilter) Tj 0 g 1 0 0 1 423.051 485.609 Tm (code) Tj 0 g 1 0 0 1 449.957 485.609 Tm (directs) Tj 0 g 1 0 0 1 485.41 485.609 Tm (it) Tj 0 g 1 0 0 1 493.968 485.609 Tm (to) Tj 0 g 1 0 0 1 506.2 485.609 Tm (the) Tj 0 g 1 0 0 1 70.875 472.434 Tm (INPUT) Tj 0 g 1 0 0 1 106.933 472.434 Tm (chain) Tj 0 g 1 0 0 1 136.281 472.434 Tm (and) Tj 0 g 1 0 0 1 157.687 472.434 Tm (checks) Tj 0 g 1 0 0 1 194.977 472.434 Tm (to) Tj 0 g 1 0 0 1 207.209 472.434 Tm (see) Tj 0 g 1 0 0 1 227.999 472.434 Tm (if) Tj 0 g 1 0 0 1 236.557 472.434 Tm (the) Tj 0 g 1 0 0 1 254.905 472.434 Tm (packet) Tj 0 g 1 0 0 1 290.369 472.434 Tm (matches) Tj 0 g 1 0 0 1 334.996 472.434 Tm (the) Tj 0 g 1 0 0 1 353.344 472.434 Tm (first) Tj 0 g 1 0 0 1 374.123 472.434 Tm (rule.) Tj 0 g 1 0 0 1 398.576 472.434 Tm (If) Tj 0 g 1 0 0 1 407.75 472.434 Tm (it) Tj 0 g 1 0 0 1 416.308 472.434 Tm (does,) Tj 0 g 1 0 0 1 446.272 472.434 Tm (the) Tj 0 g 1 0 0 1 464.62 472.434 Tm (packet) Tj 0 g 1 0 0 1 500.084 472.434 Tm (is) Tj 0 g 1 0 0 1 70.875 459.259 Tm (accepted,) Tj 0 g 1 0 0 1 121.629 459.259 Tm (and) Tj 0 g 1 0 0 1 143.035 459.259 Tm (no) Tj 0 g 1 0 0 1 158.325 459.259 Tm (further) Tj 0 g 1 0 0 1 193.173 459.259 Tm (processing) Tj 0 g 1 0 0 1 249.416 459.259 Tm (is) Tj 0 g 1 0 0 1 260.416 459.259 Tm (performed.) Tj 0 g 1 0 0 1 316.659 459.259 Tm (If) Tj 0 g 1 0 0 1 325.833 459.259 Tm (not,) Tj 0 g 1 0 0 1 347.239 459.259 Tm (the) Tj 0 g 1 0 0 1 365.587 459.259 Tm (INPUT) Tj 0 g 1 0 0 1 401.645 459.259 Tm (chain's) Tj 0 g 1 0 0 1 438.594 459.259 Tm (default) Tj 0 g 1 0 0 1 474.674 459.259 Tm (policy) Tj 0 g 1 0 0 1 505.848 459.259 Tm (is) Tj 0 g 1 0 0 1 70.875 446.084 Tm (enforced,) Tj 0 g 1 0 0 1 119.792 446.084 Tm (and) Tj 0 g 1 0 0 1 141.198 446.084 Tm (the) Tj 0 g 1 0 0 1 159.546 446.084 Tm (packet) Tj 0 g 1 0 0 1 195.01 446.084 Tm (is) Tj 0 g 1 0 0 1 206.01 446.084 Tm (discarded) Tj 0 g 1 0 0 1 256.753 446.084 Tm (\(dropped\).) Tj 0 g 1 0 0 1 70.875 418.909 Tm (That's) Tj 0 g 1 0 0 1 103.545 418.909 Tm (the) Tj 0 g 1 0 0 1 121.893 418.909 Tm (conceptual) Tj 0 g 1 0 0 1 178.147 418.909 Tm (overview.) Tj 0 g 1 0 0 1 227.658 418.909 Tm (Specifically,) Tj 0 g 1 0 0 1 288.785 418.909 Tm (our) Tj 0 g 1 0 0 1 307.738 418.909 Tm (first) Tj 0 g 1 0 0 1 328.517 418.909 Tm (rule) Tj 0 g 1 0 0 1 349.912 418.909 Tm (matches) Tj 0 g 1 0 0 1 394.539 418.909 Tm (all) Tj 0 g 1 0 0 1 408.597 418.909 Tm (packets) Tj 0 g 1 0 0 1 449.561 418.909 Tm (coming) Tj 0 g 1 0 0 1 488.072 418.909 Tm (in) Tj 0 g 1 0 0 1 499.688 418.909 Tm (from) Tj 0 g 1 0 0 1 70.875 405.734 Tm (eth0) Tj 0 g 1 0 0 1 95.339 405.734 Tm (and) Tj 0 g 1 0 0 1 116.745 405.734 Tm (lo,) Tj 0 g 1 0 0 1 131.419 405.734 Tm (immediately) Tj 0 g 1 0 0 1 193.151 405.734 Tm (allowing) Tj 0 g 1 0 0 1 235.941 405.734 Tm (them) Tj 0 g 1 0 0 1 263.452 405.734 Tm (in.) Tj 0 g 1 0 0 1 278.126 405.734 Tm (Any) Tj 0 g 1 0 0 1 300.137 405.734 Tm (packets) Tj 0 g 1 0 0 1 341.101 405.734 Tm (coming) Tj 0 g 1 0 0 1 379.612 405.734 Tm (in) Tj 0 g 1 0 0 1 391.228 405.734 Tm (from) Tj 0 g 1 0 0 1 416.286 405.734 Tm (eth1) Tj 0 g 1 0 0 1 440.75 405.734 Tm (are) Tj 0 g 1 0 0 1 459.703 405.734 Tm (dropped.) Tj 0 g 1 0 0 1 506.178 405.734 Tm (So,) Tj 0 g 1 0 0 1 70.875 392.559 Tm (if) Tj 0 g 1 0 0 1 79.433 392.559 Tm (we) Tj 0 g 1 0 0 1 96.549 392.559 Tm (enable) Tj 0 g 1 0 0 1 132.629 392.559 Tm (this) Tj 0 g 1 0 0 1 152.803 392.559 Tm (firewall) Tj 0 g 1 0 0 1 190.082 392.559 Tm (on) Tj 0 g 1 0 0 1 205.372 392.559 Tm (our) Tj 0 g 1 0 0 1 224.325 392.559 Tm (machine,) Tj 0 g 1 0 0 1 272.01 392.559 Tm (it'll) Tj 0 g 1 0 0 1 287.553 392.559 Tm (be) Tj 0 g 1 0 0 1 302.843 392.559 Tm (able) Tj 0 g 1 0 0 1 326.691 392.559 Tm (to) Tj 0 g 1 0 0 1 338.923 392.559 Tm (interact) Tj 0 g 1 0 0 1 378.05 392.559 Tm (with) Tj 0 g 1 0 0 1 400.666 392.559 Tm (our) Tj 0 g 1 0 0 1 419.619 392.559 Tm (LAN) Tj 0 g 1 0 0 1 444.072 392.559 Tm (but) Tj 0 g 1 0 0 1 462.42 392.559 Tm (be) Tj 0 g 1 0 0 1 70.875 379.384 Tm (effectively) Tj 0 g 1 0 0 1 122.839 379.384 Tm (disconnected) Tj 0 g 1 0 0 1 190.709 379.384 Tm (from) Tj 0 g 1 0 0 1 215.767 379.384 Tm (the) Tj 0 g 1 0 0 1 234.115 379.384 Tm (Internet.) Tj 0 g 1 0 0 1 277.532 379.384 Tm (Let's) Tj 0 g 1 0 0 1 303.481 379.384 Tm (look) Tj 0 g 1 0 0 1 326.713 379.384 Tm (at) Tj 0 g 1 0 0 1 338.945 379.384 Tm (a) Tj 0 g 1 0 0 1 348.119 379.384 Tm (couple) Tj 0 g 1 0 0 1 383.583 379.384 Tm (of) Tj 0 g 1 0 0 1 395.815 379.384 Tm (ways) Tj 0 g 1 0 0 1 423.931 379.384 Tm (to) Tj 0 g 1 0 0 1 436.163 379.384 Tm (enable) Tj 0 g 1 0 0 1 472.243 379.384 Tm (Internet) Tj 0 g 1 0 0 1 70.875 366.209 Tm (traffic.) Tj ET q 0 G 70.875 345.432 m 524.475 345.432 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 316.008 Tm (Traditional) Tj 0 g 1 0 0 1 159.903 316.008 Tm (firewalls,) Tj 0 g 1 0 0 1 234.909 316.008 Tm (Part) Tj 0 g 1 0 0 1 272.925 316.008 Tm (1) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 292.384 Tm (Obviously,) Tj 0 g 1 0 0 1 125.281 292.384 Tm (for) Tj 0 g 1 0 0 1 141.176 292.384 Tm (our) Tj 0 g 1 0 0 1 160.129 292.384 Tm (firewall) Tj 0 g 1 0 0 1 197.408 292.384 Tm (to) Tj 0 g 1 0 0 1 209.64 292.384 Tm (be) Tj 0 g 1 0 0 1 224.93 292.384 Tm (useful,) Tj 0 g 1 0 0 1 260.394 292.384 Tm (we) Tj 0 g 1 0 0 1 277.51 292.384 Tm (need) Tj 0 g 1 0 0 1 305.032 292.384 Tm (to) Tj 0 g 1 0 0 1 317.264 292.384 Tm (selectively) Tj 0 g 1 0 0 1 371.054 292.384 Tm (allow) Tj 0 g 1 0 0 1 399.17 292.384 Tm (some) Tj 0 g 1 0 0 1 429.123 292.384 Tm (incoming) Tj 0 g 1 0 0 1 476.192 292.384 Tm (packets) Tj 0 g 1 0 0 1 70.875 279.209 Tm (to) Tj 0 g 1 0 0 1 83.107 279.209 Tm (reach) Tj 0 g 1 0 0 1 113.676 279.209 Tm (our) Tj 0 g 1 0 0 1 132.629 279.209 Tm (machine) Tj 0 g 1 0 0 1 177.256 279.209 Tm (via) Tj 0 g 1 0 0 1 194.372 279.209 Tm (the) Tj 0 g 1 0 0 1 212.72 279.209 Tm (Internet.) Tj 0 g 1 0 0 1 256.137 279.209 Tm (There) Tj 0 g 1 0 0 1 287.927 279.209 Tm (are) Tj 0 g 1 0 0 1 306.88 279.209 Tm (two) Tj 0 g 1 0 0 1 327.054 279.209 Tm (approaches) Tj 0 g 1 0 0 1 387.587 279.209 Tm (to) Tj 0 g 1 0 0 1 399.819 279.209 Tm (opening) Tj 0 g 1 0 0 1 442.015 279.209 Tm (up) Tj 0 g 1 0 0 1 457.305 279.209 Tm (our) Tj 0 g 1 0 0 1 476.258 279.209 Tm (firewall) Tj 0 g 1 0 0 1 513.537 279.209 Tm (to) Tj 0 g 1 0 0 1 70.875 266.034 Tm (the) Tj 0 g 1 0 0 1 89.223 266.034 Tm (point) Tj 0 g 1 0 0 1 116.129 266.034 Tm (where) Tj 0 g 1 0 0 1 149.14 266.034 Tm (it) Tj 0 g 1 0 0 1 157.698 266.034 Tm (is) Tj 0 g 1 0 0 1 168.698 266.034 Tm (useful) Tj 0 g 1 0 0 1 201.104 266.034 Tm (--) Tj 0 g 1 0 0 1 217.01 266.034 Tm (one) Tj 0 g 1 0 0 1 238.416 266.034 Tm (uses) Tj 0 g 1 0 0 1 264.706 266.034 Tm (static) Tj 0 g 1 0 0 1 293.438 266.034 Tm (rules,) Tj 0 g 1 0 0 1 323.391 266.034 Tm (and) Tj 0 g 1 0 0 1 344.797 266.034 Tm (the) Tj 0 g 1 0 0 1 363.145 266.034 Tm (other) Tj 0 g 1 0 0 1 391.272 266.034 Tm (uses) Tj 0 g 1 0 0 1 417.562 266.034 Tm (dynamic,) Tj 0 g 1 0 0 1 464.631 266.034 Tm (stateful) Tj 0 g 1 0 0 1 70.875 252.859 Tm (rules.) Tj ET q 0 G 70.875 232.082 m 524.475 232.082 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 202.658 Tm (Traditional) Tj 0 g 1 0 0 1 159.903 202.658 Tm (firewalls,) Tj 0 g 1 0 0 1 234.909 202.658 Tm (Part) Tj 0 g 1 0 0 1 272.925 202.658 Tm (2) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 179.034 Tm (Let's) Tj 0 g 1 0 0 1 96.824 179.034 Tm (take) Tj 0 g 1 0 0 1 120.672 179.034 Tm (downloading) Tj 0 g 1 0 0 1 185.484 179.034 Tm (Web) Tj 0 g 1 0 0 1 211.158 179.034 Tm (pages) Tj 0 g 1 0 0 1 244.18 179.034 Tm (as) Tj 0 g 1 0 0 1 258.854 179.034 Tm (an) Tj 0 g 1 0 0 1 274.144 179.034 Tm (ex 2000 ample.) Tj 0 g 1 0 0 1 321.829 179.034 Tm (If) Tj 0 g 1 0 0 1 331.003 179.034 Tm (we) Tj 0 g 1 0 0 1 348.119 179.034 Tm (want) Tj 0 g 1 0 0 1 374.409 179.034 Tm (our) Tj 0 g 1 0 0 1 393.362 179.034 Tm (machine) Tj 0 g 1 0 0 1 437.989 179.034 Tm (to) Tj 0 g 1 0 0 1 450.221 179.034 Tm (be) Tj 0 g 1 0 0 1 465.511 179.034 Tm (able) Tj 0 g 1 0 0 1 489.359 179.034 Tm (to) Tj 0 g 1 0 0 1 70.875 165.859 Tm (download) Tj 0 g 1 0 0 1 121.013 165.859 Tm (Web) Tj 0 g 1 0 0 1 146.687 165.859 Tm (pages) Tj 0 g 1 0 0 1 179.709 165.859 Tm (from) Tj 0 g 1 0 0 1 204.767 165.859 Tm (the) Tj 0 g 1 0 0 1 223.115 165.859 Tm (Internet,) Tj 0 g 1 0 0 1 266.532 165.859 Tm (we) Tj 0 g 1 0 0 1 283.648 165.859 Tm (can) Tj 0 g 1 0 0 1 304.438 165.859 Tm (add) Tj 0 g 1 0 0 1 325.844 165.859 Tm (a) Tj 0 g 1 0 0 1 335.018 165.859 Tm (static) Tj 0 g 1 0 0 1 363.75 165.859 Tm (rule) Tj 0 g 1 0 0 1 385.145 165.859 Tm (that) Tj 0 g 1 0 0 1 406.551 165.859 Tm (will) Tj 0 g 1 0 0 1 424.877 165.859 Tm (always) Tj 0 g 1 0 0 1 461.551 165.859 Tm (be) Tj 0 g 1 0 0 1 476.841 165.859 Tm (true) Tj 0 g 1 0 0 1 498.852 165.859 Tm (for) Tj 0 g 1 0 0 1 70.875 152.684 Tm (every) Tj 0 g 1 0 0 1 100.828 152.684 Tm (incoming) Tj 0 g 1 0 0 1 147.897 152.684 Tm (http) Tj 0 g 1 0 0 1 169.303 152.684 Tm (packet,) Tj 0 g 1 0 0 1 207.825 152.684 Tm (regardless) Tj 0 g 1 0 0 1 262.231 152.684 Tm (of) Tj 0 g 1 0 0 1 274.463 152.684 Tm (origin:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 126.488 Tm (iptables) Tj 0 g 1 0 0 1 136.875 126.488 Tm (-A) Tj 0 g 1 0 0 1 156.675 126.488 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 126.488 Tm (--sport) Tj 0 g 1 0 0 1 249.075 126.488 Tm (80) Tj 0 g 1 0 0 1 268.875 126.488 Tm (-j) Tj 0 g 1 0 0 1 288.675 126.488 Tm (ACCEPT) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 88.217 Tm (Since) Tj 0 g 1 0 0 1 101.444 88.217 Tm (all) Tj 0 g 1 0 0 1 115.502 88.217 Tm (standard) Tj 0 g 1 0 0 1 161.361 88.217 Tm (Web) Tj 0 g 1 0 0 1 187.035 88.217 Tm (traffic) Tj 0 g 1 0 0 1 216.988 88.217 Tm (originates) Tj 0 g 1 0 0 1 267.731 88.217 Tm (from) Tj 0 g 1 0 0 1 292.789 88.217 Tm (a) Tj 0 g 1 0 0 1 301.963 88.217 Tm (source) Tj 0 g 1 0 0 1 338.032 88.217 Tm (port) Tj 0 g 1 0 0 1 360.043 88.217 Tm (of) Tj 0 g 1 0 0 1 372.275 88.217 Tm (80,) Tj 0 g 1 0 0 1 390.623 88.217 Tm (this) Tj 0 g 1 0 0 1 410.797 88.217 Tm (rule) Tj 0 g 1 0 0 1 432.192 88.217 Tm (effectively) Tj 0 g 1 0 0 1 484.156 88.217 Tm (allows) Tj 0 g 1 0 0 1 70.875 75.042 Tm (our) Tj 0 g 1 0 0 1 89.828 75.042 Tm (machine) Tj 0 g 1 0 0 1 134.455 75.042 Tm (to) Tj 0 g 1 0 0 1 146.687 75.042 Tm (download) Tj 0 g 1 0 0 1 196.825 75.042 Tm (Web) Tj 0 g 1 0 0 1 222.499 75.042 Tm (pages.) Tj 0 g 1 0 0 1 258.579 75.042 Tm (However,) Tj 0 g 1 0 0 1 308.09 75.042 Tm (this) Tj 0 g 1 0 0 1 328.264 75.042 Tm (traditional) Tj 0 g 1 0 0 1 379.007 75.042 Tm (approach,) Tj 0 g 1 0 0 1 430.982 75.042 Tm (while) Tj 0 g 1 0 0 1 459.098 75.042 Tm (marginally) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (6) Tj ET endstream endobj 81 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 80 0 R >> endobj 82 0 obj << /Length 10929 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (acceptable,) Tj 0 g 1 0 0 1 130.187 761.722 Tm (suffers) Tj 0 g 1 0 0 1 166.256 761.722 Tm (from) Tj 0 g 1 0 0 1 191.314 761.722 Tm (a) Tj 0 g 1 0 0 1 200.488 761.722 Tm (bunch) Tj 0 g 1 0 0 1 233.51 761.722 Tm (of) Tj 0 g 1 0 0 1 245.742 761.722 Tm (problems.) Tj ET q 0 G 70.875 740.945 m 524.475 740.945 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 711.521 Tm (Traditional) Tj 0 g 1 0 0 1 159.903 711.521 Tm (firewall) Tj 0 g 1 0 0 1 220.905 711.521 Tm (bummers,) Tj 0 g 1 0 0 1 305.919 711.521 Tm (Part) Tj 0 g 1 0 0 1 343.935 711.521 Tm (1) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 687.897 Tm (Here's) Tj 0 g 1 0 0 1 105.371 687.897 Tm (a) Tj 0 g 1 0 0 1 114.545 687.897 Tm (problem:) Tj 0 g 1 0 0 1 160.393 687.897 Tm (while) Tj 0 g 1 0 0 1 188.509 687.897 Tm (most) Tj 0 g 1 0 0 1 215.404 687.897 Tm (Web) Tj 0 g 1 0 0 1 241.078 687.897 Tm (traffic) Tj 0 g 1 0 0 1 271.031 687.897 Tm (originates) Tj 0 g 1 0 0 1 321.774 687.897 Tm (from) Tj 0 g 1 0 0 1 346.832 687.897 Tm (port) Tj 0 g 1 0 0 1 368.843 687.897 Tm (80,) Tj 0 g 1 0 0 1 387.191 687.897 Tm (some) Tj 0 g 1 0 0 1 417.144 687.897 Tm (doesn't.) Tj 0 g 1 0 0 1 458.383 687.897 Tm (So,) Tj 0 g 1 0 0 1 477.952 687.897 Tm (while) Tj 0 g 1 0 0 1 506.068 687.897 Tm (this) Tj 0 g 1 0 0 1 70.875 674.722 Tm (rule) Tj 0 g 1 0 0 1 92.27 674.722 Tm (would) Tj 0 g 1 0 0 1 124.06 674.722 Tm (work) Tj 0 g 1 0 0 1 150.339 674.722 Tm (most) Tj 0 g 1 0 0 1 177.234 674.722 Tm (of) Tj 0 g 1 0 0 1 189.466 674.722 Tm (the) Tj 0 g 1 0 0 1 207.814 674.722 Tm (time,) Tj 0 g 1 0 0 1 234.709 674.722 Tm (there) Tj 0 g 1 0 0 1 262.836 674.722 Tm (would) Tj 0 g 1 0 0 1 294.626 674.722 Tm (be) Tj 0 g 1 0 0 1 309.916 674.722 Tm (rare) Tj 0 g 1 0 0 1 332.532 674.722 Tm (instances) Tj 0 g 1 0 0 1 382.054 674.722 Tm (where) Tj 0 g 1 0 0 1 415.065 674.722 Tm (this) Tj 0 g 1 0 0 1 435.239 674.722 Tm (rule) Tj 0 g 1 0 0 1 456.634 674.722 Tm (wouldn't) Tj 0 g 1 0 0 1 70.875 661.547 Tm (work.) Tj 0 g 1 0 0 1 100.212 661.547 Tm (For) Tj 0 g 1 0 0 1 119.77 661.547 Tm (example,) Tj 0 g 1 0 0 1 167.455 661.547 Tm (maybe) Tj 0 g 1 0 0 1 203.524 661.547 Tm (you've) Tj 0 g 1 0 0 1 238.031 661.547 Tm (seen) Tj 0 g 1 0 0 1 264.937 661.547 Tm (a) Tj 0 g 1 0 0 1 274.111 661.547 Tm (URL) Tj 0 g 1 0 0 1 299.169 661.547 Tm (that) Tj 0 g 1 0 0 1 320.575 661.547 Tm (looks) Tj 0 g 1 0 0 1 349.307 661.547 Tm (like) Tj 0 g 1 0 0 1 368.865 661.547 Tm (this:) Tj 0 g 1 0 0 1 392.097 661.547 Tm ("http://www.foo.com:81".) Tj 0 g 1 0 0 1 70.875 648.372 Tm (This) Tj 0 g 1 0 0 1 94.712 648.372 Tm (example) Tj 0 g 1 0 0 1 139.339 648.372 Tm (URL) Tj 0 g 1 0 0 1 164.397 648.372 Tm (points) Tj 0 g 1 0 0 1 196.803 648.372 Tm (to) Tj 0 g 1 0 0 1 209.035 648.372 Tm (a) Tj 0 g 1 0 0 1 218.209 648.372 Tm (Web) Tj 0 g 1 0 0 1 243.883 648.372 Tm (site) Tj 0 g 1 0 0 1 264.057 648.372 Tm (on) Tj 0 g 1 0 0 1 279.347 648.372 Tm (port) Tj 0 g 1 0 0 1 301.358 648.372 Tm (81) Tj 0 g 1 0 0 1 316.648 648.372 Tm (rather) Tj 0 g 1 0 0 1 348.438 648.372 Tm (than) Tj 0 g 1 0 0 1 372.902 648.372 Tm (the) Tj 0 g 1 0 0 1 391.25 648.372 Tm (default) Tj 0 g 1 0 0 1 427.33 648.372 Tm (port) Tj 0 g 1 0 0 1 449.341 648.372 Tm (80,) Tj 0 g 1 0 0 1 467.689 648.372 Tm (and) Tj 0 g 1 0 0 1 489.095 648.372 Tm (would) Tj 0 g 1 0 0 1 70.875 635.197 Tm (be) Tj 0 g 1 0 0 1 86.165 635.197 Tm (unviewable) Tj 0 g 1 0 0 1 144.245 635.197 Tm (from) Tj 0 g 1 0 0 1 169.303 635.197 Tm (behind) Tj 0 g 1 0 0 1 205.383 635.197 Tm (our) Tj 0 g 1 0 0 1 224.336 635.197 Tm (current) Tj 0 g 1 0 0 1 261.626 635.197 Tm (firewall.) Tj 0 g 1 0 0 1 301.963 635.197 Tm (Taking) Tj 0 g 1 0 0 1 338.032 635.197 Tm (into) Tj 0 g 1 0 0 1 358.822 635.197 Tm (account) Tj 0 g 1 0 0 1 400.402 635.197 Tm (all) Tj 0 g 1 0 0 1 414.46 635.197 Tm (these) Tj 0 g 1 0 0 1 444.424 635.197 Tm (special) Tj 0 g 1 0 0 1 481.714 635.197 Tm (cases) Tj 0 g 1 0 0 1 70.875 622.022 Tm (can) Tj 0 g 1 0 0 1 91.665 622.022 Tm (quickly) Tj 0 g 1 0 0 1 128.339 622.022 Tm (turn) Tj 0 g 1 0 0 1 150.35 622.022 Tm (a) Tj 0 g 1 0 0 1 159.524 622.022 Tm (fairly) Tj 0 g 1 0 0 1 185.803 622.022 Tm (secure) Tj 0 g 1 0 0 1 221.872 622.022 Tm (firewall) Tj 0 g 1 0 0 1 259.151 622.022 Tm (into) Tj 0 g 1 0 0 1 279.941 622.022 Tm (swiss) Tj 0 g 1 0 0 1 309.883 622.022 Tm (cheese) Tj 0 g 1 0 0 1 348.405 622.022 Tm (and) Tj 0 g 1 0 0 1 369.811 622.022 Tm (quickly) Tj 0 g 1 0 0 1 406.485 622.022 Tm (fill) Tj 0 g 1 0 0 1 419.927 622.022 Tm (ou 2000 r) Tj 0 g 1 0 0 1 438.88 622.022 Tm (INPUT) Tj 0 g 1 0 0 1 474.938 622.022 Tm (chain) Tj 0 g 1 0 0 1 504.286 622.022 Tm (with) Tj 0 g 1 0 0 1 70.875 608.847 Tm (a) Tj 0 g 1 0 0 1 80.049 608.847 Tm (bunch) Tj 0 g 1 0 0 1 113.071 608.847 Tm (of) Tj 0 g 1 0 0 1 125.303 608.847 Tm (rules) Tj 0 g 1 0 0 1 152.198 608.847 Tm (to) Tj 0 g 1 0 0 1 164.43 608.847 Tm (handle) Tj 0 g 1 0 0 1 200.51 608.847 Tm (the) Tj 0 g 1 0 0 1 218.858 608.847 Tm (occasional) Tj 0 g 1 0 0 1 273.88 608.847 Tm (oddball) Tj 0 g 1 0 0 1 312.402 608.847 Tm (Web) Tj 0 g 1 0 0 1 338.076 608.847 Tm (site.) Tj ET q 0 G 70.875 588.07 m 524.475 588.07 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 558.646 Tm (Traditional) Tj 0 g 1 0 0 1 159.903 558.646 Tm (firewall) Tj 0 g 1 0 0 1 220.905 558.646 Tm (bummers,) Tj 0 g 1 0 0 1 305.919 558.646 Tm (Part) Tj 0 g 1 0 0 1 343.935 558.646 Tm (2) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 535.022 Tm (However,) Tj 0 g 1 0 0 1 120.386 535.022 Tm (the) Tj 0 g 1 0 0 1 138.734 535.022 Tm (major) Tj 0 g 1 0 0 1 169.292 535.022 Tm (problem) Tj 0 g 1 0 0 1 212.082 535.022 Tm (with) Tj 0 g 1 0 0 1 234.698 535.022 Tm (this) Tj 0 g 1 0 0 1 254.872 535.022 Tm (rule) Tj 0 g 1 0 0 1 276.267 535.022 Tm (is) Tj 0 g 1 0 0 1 287.267 535.022 Tm (security) Tj 0 g 1 0 0 1 328.22 535.022 Tm (related.) Tj 0 g 1 0 0 1 367.963 535.022 Tm (Sure,) Tj 0 g 1 0 0 1 397.311 535.022 Tm (it's) Tj 0 g 1 0 0 1 413.47 535.022 Tm (true) Tj 0 g 1 0 0 1 435.481 535.022 Tm (that) Tj 0 g 1 0 0 1 456.887 535.022 Tm (only) Tj 0 g 1 0 0 1 480.119 535.022 Tm (traffic) Tj 0 g 1 0 0 1 70.875 521.847 Tm (with) Tj 0 g 1 0 0 1 93.491 521.847 Tm (a) Tj 0 g 1 0 0 1 102.665 521.847 Tm (source) Tj 0 g 1 0 0 1 138.734 521.847 Tm (port) Tj 0 g 1 0 0 1 160.745 521.847 Tm (of) Tj 0 g 1 0 0 1 172.977 521.847 Tm (80) Tj 0 g 1 0 0 1 188.267 521.847 Tm (will) Tj 0 g 1 0 0 1 206.593 521.847 Tm (be) Tj 0 g 1 0 0 1 221.883 521.847 Tm (allowed) Tj 0 g 1 0 0 1 262.231 521.847 Tm (through) Tj 0 g 1 0 0 1 302.59 521.847 Tm (our) Tj 0 g 1 0 0 1 321.543 521.847 Tm (firewall.) Tj 0 g 1 0 0 1 361.88 521.847 Tm (But) Tj 0 g 1 0 0 1 381.449 521.847 Tm (the) Tj 0 g 1 0 0 1 399.797 521.847 Tm (source) Tj 0 g 1 0 0 1 435.866 521.847 Tm (port) Tj 0 g 1 0 0 1 457.877 521.847 Tm (of) Tj 0 g 1 0 0 1 470.109 521.847 Tm (a) Tj 0 g 1 0 0 1 479.283 521.847 Tm (packet) Tj 0 g 1 0 0 1 514.747 521.847 Tm (is) Tj 0 g 1 0 0 1 70.875 508.672 Tm (not) Tj 0 g 1 0 0 1 89.223 508.672 Tm (something) Tj 0 g 1 0 0 1 143.024 508.672 Tm (that) Tj 0 g 1 0 0 1 164.43 508.672 Tm (we) Tj 0 g 1 0 0 1 181.546 508.672 Tm (have) Tj 0 g 1 0 0 1 208.452 508.672 Tm (any) Tj 0 g 1 0 0 1 229.242 508.672 Tm (control) Tj 0 g 1 0 0 1 265.311 508.672 Tm (over,) Tj 0 g 1 0 0 1 292.822 508.672 Tm (and) Tj 0 g 1 0 0 1 314.228 508.672 Tm (it) Tj 0 g 1 0 0 1 322.786 508.672 Tm (can) Tj 0 g 1 0 0 1 343.576 508.672 Tm (be) Tj 0 g 1 0 0 1 358.866 508.672 Tm (easily) Tj 0 g 1 0 0 1 390.04 508.672 Tm (altered) Tj 0 g 1 0 0 1 426.725 508.672 Tm (by) Tj 0 g 1 0 0 1 441.399 508.672 Tm (an) Tj 0 g 1 0 0 1 456.689 508.672 Tm (intruder.) Tj 0 g 1 0 0 1 500.095 508.672 Tm (For) Tj 0 g 1 0 0 1 70.875 495.497 Tm (example,) Tj 0 g 1 0 0 1 118.56 495.497 Tm (if) Tj 0 g 1 0 0 1 127.118 495.497 Tm (an) Tj 0 g 1 0 0 1 142.408 495.497 Tm (intruder) Tj 0 g 1 0 0 1 182.756 495.497 Tm (knew) Tj 0 g 1 0 0 1 211.488 495.497 Tm (how) Tj 0 g 1 0 0 1 234.72 495.497 Tm (our) Tj 0 g 1 0 0 1 253.673 495.497 Tm (firewall) Tj 0 g 1 0 0 1 290.952 495.497 Tm (were) Tj 0 g 1 0 0 1 317.847 495.497 Tm (designed,) Tj 0 g 1 0 0 1 368.601 495.497 Tm (he) Tj 0 g 1 0 0 1 383.891 495.497 Tm (could) Tj 0 g 1 0 0 1 413.239 495.497 Tm (bypass) Tj 0 g 1 0 0 1 451.145 495.497 Tm (our) Tj 0 g 1 0 0 1 470.098 495.497 Tm (firewall) Tj 0 g 1 0 0 1 507.377 495.497 Tm (by) Tj 0 g 1 0 0 1 70.875 482.322 Tm (simply) Tj 0 g 1 0 0 1 105.096 482.322 Tm (making) Tj 0 g 1 0 0 1 143.607 482.322 Tm (sure) Tj 0 g 1 0 0 1 168.06 482.322 Tm (that) Tj 0 g 1 0 0 1 189.466 482.322 Tm (all) Tj 0 g 1 0 0 1 203.524 482.322 Tm (his) Tj 0 g 1 0 0 1 220.64 482.322 Tm (incoming) Tj 0 g 1 0 0 1 267.709 482.322 Tm (connections) Tj 0 g 1 0 0 1 329.463 482.322 Tm (originated) Tj 0 g 1 0 0 1 380.822 482.322 Tm (from) Tj 0 g 1 0 0 1 405.88 482.322 Tm (port) Tj 0 g 1 0 0 1 427.891 482.322 Tm (80) Tj 0 g 1 0 0 1 443.181 482.322 Tm (on) Tj 0 g 1 0 0 1 458.471 482.322 Tm (one) Tj 0 g 1 0 0 1 479.877 482.322 Tm (of) Tj 0 g 1 0 0 1 492.109 482.322 Tm (his) Tj 0 g 1 0 0 1 70.875 469.147 Tm (machines!) Tj 0 g 1 0 0 1 124.06 469.147 Tm (Because) Tj 0 g 1 0 0 1 169.919 469.147 Tm (this) Tj 0 g 1 0 0 1 190.093 469.147 Tm (static) Tj 0 g 1 0 0 1 218.825 469.147 Tm (firewall) Tj 0 g 1 0 0 1 256.104 469.147 Tm (rule) Tj 0 g 1 0 0 1 277.499 469.147 Tm (is) Tj 0 g 1 0 0 1 288.499 469.147 Tm (so) Tj 0 g 1 0 0 1 303.173 469.147 Tm (easy) Tj 0 g 1 0 0 1 329.463 469.147 Tm (to) Tj 0 g 1 0 0 1 341.695 469.147 Tm (exploit,) Tj 0 g 1 0 0 1 379.601 469.147 Tm (a) Tj 0 g 1 0 0 1 388.775 469.147 Tm (more) Tj 0 g 1 0 0 1 416.891 469.147 Tm (secure) Tj 0 g 1 0 0 1 452.96 469.147 Tm (dynamic) Tj 0 g 1 0 0 1 70.875 455.972 Tm (approach) Tj 0 g 1 0 0 1 119.792 455.972 Tm (is) Tj 0 g 1 0 0 1 130.792 455.972 Tm (needed.) Tj 0 g 1 0 0 1 173.604 455.972 Tm (Thankfully,) Tj 0 g 1 0 0 1 229.847 455.972 Tm (iptables) Tj 0 g 1 0 0 1 270.811 455.972 Tm (and) Tj 0 g 1 0 0 1 292.217 455.972 Tm (kernel) Tj 0 g 1 0 0 1 325.228 455.972 Tm (2.4) Tj 0 g 1 0 0 1 343.576 455.972 Tm (provide) Tj 0 g 1 0 0 1 382.703 455.972 Tm (everything) Tj 0 g 1 0 0 1 436.504 455.972 Tm (we) Tj 0 g 1 0 0 1 453.62 455.972 Tm (need) Tj 0 g 1 0 0 1 481.142 455.972 Tm (to) Tj 0 g 1 0 0 1 70.875 442.797 Tm (enable) Tj 0 g 1 0 0 1 106.955 442.797 Tm (dynamic,) Tj 0 g 1 0 0 1 154.024 442.797 Tm (stateful) Tj 0 g 1 0 0 1 192.546 442.797 Tm (filtering.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (7) Tj ET endstream endobj 83 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 82 0 R >> endobj 84 0 obj << /Length 19481 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (4.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (Stateful) Tj 0 g 1 0 0 1 221.967 756.696 Tm (firewalls) Tj 0 g 1 0 0 1 70.875 725.046 Tm (State) Tj 0 g 1 0 0 1 117.909 725.046 Tm (basics) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (Rather) Tj 0 g 1 0 0 1 106.944 701.422 Tm (than) Tj 0 g 1 0 0 1 131.408 701.422 Tm (opening) Tj 0 g 1 0 0 1 173.604 701.422 Tm (up) Tj 0 g 1 0 0 1 188.894 701.422 Tm (holes) Tj 0 g 1 0 0 1 218.242 701.422 Tm (in) Tj 0 g 1 0 0 1 229.858 701.422 Tm (our) Tj 0 g 1 0 0 1 248.811 701.422 Tm (firewall) Tj 0 g 1 0 0 1 286.09 701.422 Tm (based) Tj 0 g 1 0 0 1 319.112 701.422 Tm (on) Tj 0 g 1 0 0 1 334.402 701.422 Tm (static) Tj 0 g 1 0 0 1 363.134 701.422 Tm (protocol) Tj 0 g 1 0 0 1 405.319 701.422 Tm (characteristics,) Tj 0 g 1 0 0 1 481.725 701.422 Tm (we) Tj 0 g 1 0 0 1 498.841 701.422 Tm (can) Tj 0 g 1 0 0 1 70.875 688.247 Tm (use) Tj 0 g 1 0 0 1 91.665 688.247 Tm (Linux's) Tj 0 g 1 0 0 1 128.614 688.247 Tm (new) Tj 0 g 1 0 0 1 151.846 688.247 Tm (connection) Tj 0 g 1 0 0 1 208.1 688.247 Tm (tracking) Tj 0 g 1 0 0 1 249.669 688.247 Tm (functionality) Tj 0 g 1 0 0 1 310.807 688.247 Tm (to) Tj 0 g 1 0 0 1 323.039 688.247 Tm (make) Tj 0 g 1 0 0 1 352.992 688.247 Tm (firewall) Tj 0 g 1 0 0 1 390.271 688.247 Tm (decisions) Tj 0 g 1 0 0 1 439.177 688.247 Tm (based) Tj 0 g 1 0 0 1 472.199 688.247 Tm (on) Tj 0 g 1 0 0 1 487.489 688.247 Tm (the) Tj 0 g 1 0 0 1 70.875 675.072 Tm (dynamic) Tj /F2 11 Tf 0 g 1 0 0 1 1 2000 14.886 675.072 Tm (connection) Tj 0 g 1 0 0 1 171.14 675.072 Tm (state) Tj /F1 11 Tf 0 g 1 0 0 1 198.046 675.072 Tm (of) Tj 0 g 1 0 0 1 210.278 675.072 Tm (packets.) Tj 0 g 1 0 0 1 254.3 675.072 Tm (Conntrack) Tj 0 g 1 0 0 1 307.485 675.072 Tm (works) Tj 0 g 1 0 0 1 339.264 675.072 Tm (by) Tj 0 g 1 0 0 1 353.938 675.072 Tm (associating) Tj 0 g 1 0 0 1 412.018 675.072 Tm (every) Tj 0 g 1 0 0 1 441.971 675.072 Tm (packet) Tj 0 g 1 0 0 1 477.435 675.072 Tm (with) Tj 0 g 1 0 0 1 500.051 675.072 Tm (an) Tj 0 g 1 0 0 1 70.875 661.897 Tm (individual) Tj 0 g 1 0 0 1 119.781 661.897 Tm (bidirectional) Tj 0 g 1 0 0 1 181.524 661.897 Tm (communications) Tj 0 g 1 0 0 1 264.046 661.897 Tm (channel,) Tj 0 g 1 0 0 1 308.684 661.897 Tm (or) Tj 0 g 1 0 0 1 321.521 661.897 Tm (connection.) Tj 0 g 1 0 0 1 70.875 634.722 Tm (For) Tj 0 g 1 0 0 1 90.433 634.722 Tm (example,) Tj 0 g 1 0 0 1 138.118 634.722 Tm (consider) Tj 0 g 1 0 0 1 182.745 634.722 Tm (what) Tj 0 g 1 0 0 1 209.035 634.722 Tm (happens) Tj 0 g 1 0 0 1 254.289 634.722 Tm (when) Tj 0 g 1 0 0 1 283.637 634.722 Tm (you) Tj 0 g 1 0 0 1 304.427 634.722 Tm (use) Tj 0 g 1 0 0 1 325.217 634.722 Tm (telnet) Tj 0 g 1 0 0 1 355.181 634.722 Tm (or) Tj 0 g 1 0 0 1 368.018 634.722 Tm (ssh) Tj 0 g 1 0 0 1 388.192 634.722 Tm (to) Tj 0 g 1 0 0 1 400.424 634.722 Tm (connect) Tj 0 g 1 0 0 1 442.004 634.722 Tm (to) Tj 0 g 1 0 0 1 454.236 634.722 Tm (a) Tj 0 g 1 0 0 1 463.41 634.722 Tm (remote) Tj 0 g 1 0 0 1 70.875 621.547 Tm (machine.) Tj 0 g 1 0 0 1 118.56 621.547 Tm (If) Tj 0 g 1 0 0 1 127.734 621.547 Tm (you) Tj 0 g 1 0 0 1 148.524 621.547 Tm (view) Tj 0 g 1 0 0 1 173.582 621.547 Tm (your) Tj 0 g 1 0 0 1 198.035 621.547 Tm (network) Tj 0 g 1 0 0 1 239.604 621.547 Tm (traffic) Tj 0 g 1 0 0 1 269.557 621.547 Tm (at) Tj 0 g 1 0 0 1 281.789 621.547 Tm (the) Tj 0 g 1 0 0 1 300.137 621.547 Tm (packet) Tj 0 g 1 0 0 1 335.601 621.547 Tm (level,) Tj 0 g 1 0 0 1 364.333 621.547 Tm (all) Tj 0 g 1 0 0 1 378.391 621.547 Tm (you) Tj 0 g 1 0 0 1 399.181 621.547 Tm (see) Tj 0 g 1 0 0 1 419.971 621.547 Tm (is) Tj 0 g 1 0 0 1 430.971 621.547 Tm (a) Tj 0 g 1 0 0 1 440.145 621.547 Tm (bunch) Tj 0 g 1 0 0 1 473.167 621.547 Tm (of) Tj 0 g 1 0 0 1 485.399 621.547 Tm (packets) Tj 0 g 1 0 0 1 70.875 608.372 Tm (zipping) Tj 0 g 1 0 0 1 108.781 608.372 Tm (from) Tj 0 g 1 0 0 1 133.839 608.372 Tm (one) Tj 0 g 1 0 0 1 155.245 608.372 Tm (machine) Tj 0 g 1 0 0 1 199.872 608.372 Tm (to) Tj 0 g 1 0 0 1 212.104 608.372 Tm (another.) Tj 0 g 1 0 0 1 255.521 608.372 Tm (However,) Tj 0 g 1 0 0 1 305.032 608.372 Tm (at) Tj 0 g 1 0 0 1 317.264 608.372 Tm (a) Tj 0 g 1 0 0 1 326.438 608.372 Tm (higher) Tj 0 g 1 0 0 1 360.065 608.372 Tm (level,) Tj 0 g 1 0 0 1 388.797 608.372 Tm (this) Tj 0 g 1 0 0 1 408.971 608.372 Tm (exchange) Tj 0 g 1 0 0 1 459.725 608.372 Tm (of) Tj 0 g 1 0 0 1 471.957 608.372 Tm (packets) Tj 0 g 1 0 0 1 512.921 608.372 Tm (is) Tj 0 g 1 0 0 1 70.875 595.197 Tm (actually) Tj 0 g 1 0 0 1 111.223 595.197 Tm (a) Tj 0 g 1 0 0 1 120.397 595.197 Tm (bidirectional) Tj 0 g 1 0 0 1 182.14 595.197 Tm (communications) Tj 0 g 1 0 0 1 264.662 595.197 Tm (channel) Tj 0 g 1 0 0 1 306.242 595.197 Tm (between) Tj 0 g 1 0 0 1 350.88 595.197 Tm (your) Tj 0 g 1 0 0 1 375.333 595.197 Tm (local) Tj 0 g 1 0 0 1 401.007 595.197 Tm (machine) Tj 0 g 1 0 0 1 445.634 595.197 Tm (and) Tj 0 g 1 0 0 1 467.04 595.197 Tm (a) Tj 0 g 1 0 0 1 476.214 595.197 Tm (remote) Tj 0 g 1 0 0 1 70.875 582.022 Tm (machine.) Tj 0 g 1 0 0 1 118.56 582.022 Tm (Traditional) Tj 0 g 1 0 0 1 172.966 582.022 Tm (\(old-fashioned\)) Tj 0 g 1 0 0 1 252.144 582.022 Tm (firewalls) Tj 0 g 1 0 0 1 294.923 582.022 Tm (only) Tj 0 g 1 0 0 1 318.155 582.022 Tm (look) Tj 0 g 1 0 0 1 341.387 582.022 Tm (at) Tj 0 g 1 0 0 1 353.619 582.022 Tm (the) Tj 0 g 1 0 0 1 371.967 582.022 Tm (individual) Tj 0 g 1 0 0 1 420.873 582.022 Tm (packets,) Tj 0 g 1 0 0 1 464.895 582.022 Tm (not) Tj 0 g 1 0 0 1 70.875 568.847 Tm (recognizing) Tj 0 g 1 0 0 1 130.176 568.847 Tm (that) Tj 0 g 1 0 0 1 151.582 568.847 Tm (they're) Tj 0 g 1 0 0 1 187.31 568.847 Tm (actually) Tj 0 g 1 0 0 1 227.658 568.847 Tm (part) Tj 0 g 1 0 0 1 249.669 568.847 Tm (of) Tj 0 g 1 0 0 1 261.901 568.847 Tm (a) Tj 0 g 1 0 0 1 271.075 568.847 Tm (larger) Tj 0 g 1 0 0 1 302.249 568.847 Tm (whole,) Tj 0 g 1 0 0 1 337.097 568.847 Tm (a) Tj 0 g 1 0 0 1 346.271 568.847 Tm (connection.) Tj ET q 0 G 70.875 548.07 m 524.475 548.07 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 518.646 Tm (Inside) Tj 0 g 1 0 0 1 123.903 518.646 Tm (conntrack) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 495.022 Tm (That's) Tj 0 g 1 0 0 1 103.545 495.022 Tm (where) Tj 0 g 1 0 0 1 136.556 495.022 Tm (connection) Tj 0 g 1 0 0 1 192.81 495.022 Tm (tracking) Tj 0 g 1 0 0 1 234.379 495.022 Tm (technology) Tj 0 g 1 0 0 1 290.633 495.022 Tm (comes) Tj 0 g 1 0 0 1 326.086 495.022 Tm (in.) Tj 0 g 1 0 0 1 340.76 495.022 Tm (Linux's) Tj 0 g 1 0 0 1 377.709 495.022 Tm (conntrack) Tj 0 g 1 0 0 1 428.452 495.022 Tm (functionality) Tj 0 g 1 0 0 1 489.59 495.022 Tm (can) Tj 0 g 1 0 0 1 70.875 481.847 Tm ("see") Tj 0 g 1 0 0 1 99.475 481.847 Tm (the) Tj 0 g 1 0 0 1 117.823 481.847 Tm (higher-level) Tj 0 g 1 0 0 1 180.49 481.847 Tm (connections) Tj 0 g 1 0 0 1 242.244 481.847 Tm (that) Tj 0 g 1 0 0 1 263.65 481.847 Tm (are) Tj 0 g 1 0 0 1 282.603 481.847 Tm (taking) Tj 0 g 1 0 0 1 315.009 481.847 Tm (place,) Tj 0 g 1 0 0 1 347.415 481.847 Tm (recognizing) Tj 0 g 1 0 0 1 406.716 481.847 Tm (your) Tj 0 g 1 0 0 1 431.169 481.847 Tm (ssh) Tj 0 g 1 0 0 1 451.343 481.847 Tm (session) Tj 0 g 1 0 0 1 491.691 481.847 Tm (as) Tj 0 g 1 0 0 1 506.365 481.847 Tm (a) Tj 0 g 1 0 0 1 70.875 468.672 Tm (single) Tj 0 g 1 0 0 1 102.665 468.672 Tm (logical) Tj 0 g 1 0 0 1 136.897 468.672 Tm (entity.) Tj 0 g 1 0 0 1 169.303 468.672 Tm (Conntrack) Tj 0 g 1 0 0 1 222.488 468.672 Tm (can) Tj 0 g 1 0 0 1 243.278 468.672 Tm (even) Tj 0 g 1 0 0 1 270.184 468.672 Tm (recognize) Tj 0 g 1 0 0 1 320.927 468.672 Tm (UDP) Tj 0 g 1 0 0 1 347.206 468.672 Tm (and) Tj 0 g 1 0 0 1 368.612 468.672 Tm (ICMP) Tj 0 g 1 0 0 1 399.17 468.672 Tm (packet) Tj 0 g 1 0 0 1 434.634 468.672 Tm (exchanges) Tj 0 g 1 0 0 1 490.888 468.672 Tm (as) Tj 0 g 1 0 0 1 70.875 455.497 Tm (logical) Tj 0 g 1 0 0 1 105.107 455.497 Tm ("connections",) Tj 0 g 1 0 0 1 177.729 455.497 Tm (even) Tj 0 g 1 0 0 1 204.635 455.497 Tm (though) Tj 0 g 1 0 0 1 241.331 455.497 Tm (UDP) Tj 0 g 1 0 0 1 267.61 455.497 Tm (and) Tj 0 g 1 0 0 1 289.016 455.497 Tm (ICMP) Tj 0 g 1 0 0 1 319.574 455.497 Tm (are) Tj 0 g 1 0 0 1 338.527 455.497 Tm (connectionless) Tj 0 g 1 0 0 1 414.339 455.497 Tm (in) Tj 0 g 1 0 0 1 425.955 455.497 Tm (nature;) Tj 0 g 1 0 0 1 463.256 455.497 Tm (this) Tj 0 g 1 0 0 1 483.43 455.497 Tm (is) Tj 0 g 1 0 0 1 494.43 455.497 Tm (very) Tj 0 g 1 0 0 1 70.875 442.322 Tm (helpful) Tj 0 g 1 0 0 1 106.339 442.322 Tm (because) Tj 0 g 1 0 0 1 150.977 442.322 Tm (it) Tj 0 g 1 0 0 1 159.535 442.322 Tm (allows) Tj 0 g 1 0 0 1 193.151 442.322 Tm (us) Tj 0 g 1 0 0 1 207.825 442.322 Tm (to) Tj 0 g 1 0 0 1 220.057 442.322 Tm (use) Tj 0 g 1 0 0 1 240.847 442.322 Tm (conntrack) Tj 0 g 1 0 0 1 291.59 442.322 Tm (to) Tj 0 g 1 0 0 1 303.822 442.322 Tm (handle) Tj 0 g 1 0 0 1 339.902 442.322 Tm (ICMP) Tj 0 g 1 0 0 1 370.46 442.322 Tm (and) Tj 0 g 1 0 0 1 391.866 442.322 Tm (UDP) Tj 0 g 1 0 0 1 418.145 442.322 Tm (packet) Tj 0 g 1 0 0 1 453.609 442.322 Tm (exchanges.) Tj 0 g 1 0 0 1 70.875 415.147 Tm (If) Tj 0 g 1 0 0 1 80.049 415.147 Tm (you've) Tj 0 g 1 0 0 1 114.556 415.147 Tm (already) Tj 0 g 1 0 0 1 153.683 415.147 Tm (rebooted) Tj 0 g 1 0 0 1 200.158 415.147 Tm (and) Tj 0 g 1 0 0 1 221.564 415.147 Tm (are) Tj 0 g 1 0 0 1 240.517 415.147 Tm (using) Tj 0 g 1 0 0 1 269.865 415.147 Tm (your) Tj 0 g 1 0 0 1 294.318 415.147 Tm (new) Tj 0 g 1 0 0 1 317.55 415.147 Tm (netfilter-enabled) Tj 0 g 1 0 0 1 402.239 415.147 Tm (kernel,) Tj 0 g 1 0 0 1 438.308 415.147 Tm (you) Tj 0 g 1 0 0 1 459.098 415.147 Tm (can) Tj 0 g 1 0 0 1 479.888 415.147 Tm (view) Tj 0 g 1 0 0 1 504.946 415.147 Tm (a) Tj 0 g 1 0 0 1 70.875 401.972 Tm (list) Tj 0 g 1 0 0 1 87.375 401.972 Tm (of) Tj 0 g 1 0 0 1 99.607 401.972 Tm (active) Tj 0 g 1 0 0 1 131.397 401.972 Tm (network) Tj 0 g 1 0 0 1 172.966 401.972 Tm (connecti 2000 ons) Tj 0 g 1 0 0 1 234.72 401.972 Tm (that) Tj 0 g 1 0 0 1 256.126 401.972 Tm (your) Tj 0 g 1 0 0 1 280.579 401.972 Tm (machine) Tj 0 g 1 0 0 1 325.206 401.972 Tm (is) Tj 0 g 1 0 0 1 336.206 401.972 Tm (participating) Tj 0 g 1 0 0 1 398.565 401.972 Tm (in) Tj 0 g 1 0 0 1 410.181 401.972 Tm (by) Tj 0 g 1 0 0 1 424.855 401.972 Tm (typing) Tj 0 g 1 0 0 1 457.261 401.972 Tm ("cat) Tj 0 g 1 0 0 1 70.875 388.797 Tm (/proc/net/ip_conntrack".) Tj 0 g 1 0 0 1 189.114 388.797 Tm (Even) Tj 0 g 1 0 0 1 217.241 388.797 Tm (with) Tj 0 g 1 0 0 1 239.857 388.797 Tm (no) Tj 0 g 1 0 0 1 255.147 388.797 Tm (firewall) Tj 0 g 1 0 0 1 292.426 388.797 Tm (configured,) Tj 0 g 1 0 0 1 349.901 388.797 Tm (Linux's) Tj 0 g 1 0 0 1 386.85 388.797 Tm (conntrack) Tj 0 g 1 0 0 1 437.593 388.797 Tm (functionality) Tj 0 g 1 0 0 1 498.731 388.797 Tm (is) Tj 0 g 1 0 0 1 70.875 375.622 Tm (working) Tj 0 g 1 0 0 1 111.828 375.622 Tm (behind) Tj 0 g 1 0 0 1 147.908 375.622 Tm (the) Tj 0 g 1 0 0 1 166.256 375.622 Tm (scenes,) Tj 0 g 1 0 0 1 207.22 375.622 Tm (keeping) Tj 0 g 1 0 0 1 248.8 375.622 Tm (track) Tj 0 g 1 0 0 1 275.695 375.622 Tm (of) Tj 0 g 1 0 0 1 287.927 375.622 Tm (the) Tj 0 g 1 0 0 1 306.275 375.622 Tm (connections) Tj 0 g 1 0 0 1 368.029 375.622 Tm (that) Tj 0 g 1 0 0 1 389.435 375.622 Tm (your) Tj 0 g 1 0 0 1 413.888 375.622 Tm (machine) Tj 0 g 1 0 0 1 458.515 375.622 Tm (is) Tj 0 g 1 0 0 1 70.875 362.447 Tm (participating) Tj 0 g 1 0 0 1 133.234 362.447 Tm (in.) Tj ET q 0 G 70.875 341.67 m 524.475 341.67 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 312.246 Tm (The) Tj 0 g 1 0 0 1 106.893 312.246 Tm (NEW) Tj 0 g 1 0 0 1 153.891 312.246 Tm (connection) Tj 0 g 1 0 0 1 245.943 312.246 Tm (state,) Tj 0 g 1 0 0 1 294.975 312.246 Tm (Part) Tj 0 g 1 0 0 1 332.991 312.246 Tm (1) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 288.622 Tm (Conntrack) Tj 0 g 1 0 0 1 124.06 288.622 Tm (doesn't) Tj 0 g 1 0 0 1 162.241 288.622 Tm (just) Tj 0 g 1 0 0 1 182.415 288.622 Tm (recognize) Tj 0 g 1 0 0 1 233.158 288.622 Tm (connections,) Tj 0 g 1 0 0 1 297.97 288.622 Tm (it) Tj 0 g 1 0 0 1 306.528 288.622 Tm (also) Tj 0 g 1 0 0 1 329.76 288.622 Tm (classifies) Tj 0 g 1 0 0 1 377.434 288.622 Tm (every) Tj 0 g 1 0 0 1 407.387 288.622 Tm (packet) Tj 0 g 1 0 0 1 442.851 288.622 Tm (that) Tj 0 g 1 0 0 1 464.257 288.622 Tm (it) Tj 0 g 1 0 0 1 472.815 288.622 Tm (sees) Tj 0 g 1 0 0 1 499.105 288.622 Tm (into) Tj 0 g 1 0 0 1 70.875 275.447 Tm (one) Tj 0 g 1 0 0 1 92.281 275.447 Tm (of) Tj 0 g 1 0 0 1 104.513 275.447 Tm (four) Tj 0 g 1 0 0 1 126.524 275.447 Tm (connection) Tj 0 g 1 0 0 1 182.778 275.447 Tm (states.) Tj 0 g 1 0 0 1 218.242 275.447 Tm (The) Tj 0 g 1 0 0 1 240.253 275.447 Tm (first) Tj 0 g 1 0 0 1 261.032 275.447 Tm (state) Tj 0 g 1 0 0 1 287.938 275.447 Tm (that) Tj 0 g 1 0 0 1 309.344 275.447 Tm (we're) Tj 0 g 1 0 0 1 338.34 275.447 Tm (going) Tj 0 g 1 0 0 1 368.304 275.447 Tm (to) Tj 0 g 1 0 0 1 380.536 275.447 Tm (talk) Tj 0 g 1 0 0 1 400.71 275.447 Tm (about) Tj 0 g 1 0 0 1 431.29 275.447 Tm (is) Tj 0 g 1 0 0 1 442.29 275.447 Tm (called) Tj 0 g 1 0 0 1 474.08 275.447 Tm (NEW.) Tj 0 g 1 0 0 1 70.875 262.272 Tm (When) Tj 0 g 1 0 0 1 102.665 262.272 Tm (you) Tj 0 g 1 0 0 1 123.455 262.272 Tm (type) Tj 0 g 1 0 0 1 147.303 262.272 Tm ("ssh) Tj 0 g 1 0 0 1 171.382 262.272 Tm (remote.host.com",) Tj 0 g 1 0 0 1 263.32 262.272 Tm (the) Tj 0 g 1 0 0 1 281.668 262.272 Tm (initial) Tj 0 g 1 0 0 1 309.784 262.272 Tm (packet) Tj 0 g 1 0 0 1 345.248 262.272 Tm (or) Tj 0 g 1 0 0 1 358.085 262.272 Tm (burst) Tj 0 g 1 0 0 1 385.596 262.272 Tm (of) Tj 0 g 1 0 0 1 397.828 262.272 Tm (packets) Tj 0 g 1 0 0 1 438.792 262.272 Tm (that) Tj 0 g 1 0 0 1 460.198 262.272 Tm (originate) Tj 0 g 1 0 0 1 70.875 249.097 Tm (from) Tj 0 g 1 0 0 1 95.933 249.097 Tm (your) Tj 0 g 1 0 0 1 120.386 249.097 Tm (machine) Tj 0 g 1 0 0 1 165.013 249.097 Tm (and) Tj 0 g 1 0 0 1 186.419 249.097 Tm (are) Tj 0 g 1 0 0 1 205.372 249.097 Tm (destined) Tj 0 g 1 0 0 1 250.01 249.097 Tm (for) Tj 0 g 1 0 0 1 265.905 249.097 Tm (remote.host.com) Tj 0 g 1 0 0 1 350.88 249.097 Tm (are) Tj 0 g 1 0 0 1 369.833 249.097 Tm (in) Tj 0 g 1 0 0 1 381.449 249.097 Tm (the) Tj 0 g 1 0 0 1 399.797 249.097 Tm (NEW) Tj 0 g 1 0 0 1 428.518 249.097 Tm (state.) Tj 0 g 1 0 0 1 458.482 249.097 Tm (However,) Tj 0 g 1 0 0 1 507.993 249.097 Tm (as) Tj 0 g 1 0 0 1 70.875 235.922 Tm (soon) Tj 0 g 1 0 0 1 97.781 235.922 Tm (as) Tj 0 g 1 0 0 1 112.455 235.922 Tm (you) Tj 0 g 1 0 0 1 133.245 235.922 Tm (receive) Tj 0 g 1 0 0 1 171.756 235.922 Tm (even) Tj 0 g 1 0 0 1 198.662 235.922 Tm (just) Tj 0 g 1 0 0 1 218.836 235.922 Tm (a) Tj 0 g 1 0 0 1 228.01 235.922 Tm (single) Tj 0 g 1 0 0 1 259.8 235.922 Tm (reply) Tj 0 g 1 0 0 1 286.695 235.922 Tm (packet) Tj 0 g 1 0 0 1 322.159 235.922 Tm (from) Tj 0 g 1 0 0 1 347.217 235.922 Tm (remote.host.com,) Tj 0 g 1 0 0 1 435.25 235.922 Tm (any) Tj 0 g 1 0 0 1 456.04 235.922 Tm (further) Tj 0 g 1 0 0 1 70.875 222.747 Tm (packets) Tj 0 g 1 0 0 1 111.839 222.747 Tm (you) Tj 0 g 1 0 0 1 132.629 222.747 Tm (send) Tj 0 g 1 0 0 1 159.535 222.747 Tm (to) Tj 0 g 1 0 0 1 171.767 222.747 Tm (remote.host.com) Tj 0 g 1 0 0 1 256.742 222.747 Tm (as) Tj 0 g 1 0 0 1 271.416 222.747 Tm (part) Tj 0 g 1 0 0 1 293.427 222.747 Tm (of) Tj 0 g 1 0 0 1 305.659 222.747 Tm (this) Tj 0 g 1 0 0 1 325.833 222.747 Tm (connection) Tj 0 g 1 0 0 1 382.087 222.747 Tm (aren't) Tj 0 g 1 0 0 1 412.315 222.747 Tm (considered) Tj 0 g 1 0 0 1 469.174 222.747 Tm (NEW) Tj 0 g 1 0 0 1 70.875 209.572 Tm (packets) Tj 0 g 1 0 0 1 111.839 209.572 Tm (anymore.) Tj 0 g 1 0 0 1 160.745 209.572 Tm (So,) Tj 0 g 1 0 0 1 180.314 209.572 Tm (a) Tj 0 g 1 0 0 1 189.488 209.572 Tm (packet) Tj 0 g 1 0 0 1 224.952 209.572 Tm (is) Tj 0 g 1 0 0 1 235.952 209.572 Tm (only) Tj 0 g 1 0 0 1 259.184 209.572 Tm (considered) Tj 0 g 1 0 0 1 316.043 209.572 Tm (NEW) Tj 0 g 1 0 0 1 344.764 209.572 Tm (when) Tj 0 g 1 0 0 1 374.112 209.572 Tm (it's) Tj 0 g 1 0 0 1 390.271 209.572 Tm (involved) Tj 0 g 1 0 0 1 433.677 209.572 Tm (in) Tj 0 g 1 0 0 1 445.293 209.572 Tm (establishing) Tj 0 g 1 0 0 1 506.431 209.572 Tm (a) Tj 0 g 1 0 0 1 70.875 196.397 Tm (new) Tj 0 g 1 0 0 1 94.107 196.397 Tm (connection,) Tj 0 g 1 0 0 1 153.419 196.397 Tm (and) Tj 0 g 1 0 0 1 174.825 196.397 Tm (no) Tj 0 g 1 0 0 1 190.115 196.397 Tm (traffic) Tj 0 g 1 0 0 1 220.068 196.397 Tm (has) Tj 0 g 1 0 0 1 240.858 196.397 Tm (yet) Tj 0 g 1 0 0 1 258.59 196.397 Tm (been) Tj 0 g 1 0 0 1 286.112 196.397 Tm (received) Tj 0 g 1 0 0 1 330.739 196.397 Tm (from) Tj 0 g 1 0 0 1 355.797 196.397 Tm (the) Tj 0 g 1 0 0 1 374.145 196.397 Tm (remote) Tj 0 g 1 0 0 1 411.435 196.397 Tm (host) Tj 0 g 1 0 0 1 435.283 196.397 Tm (\(as) Tj 0 g 1 0 0 1 453.62 196.397 Tm (part) Tj 0 g 1 0 0 1 475.631 196.397 Tm (of) Tj 0 g 1 0 0 1 487.863 196.397 Tm (this) Tj 0 g 1 0 0 1 70.875 183.222 Tm (particular) Tj 0 g 1 0 0 1 119.165 183.222 Tm (connection,) Tj 0 g 1 0 0 1 178.477 183.222 Tm (of) Tj 0 g 1 0 0 1 190.709 183.222 Tm (course\).) Tj ET q 0 G 70.875 162.445 m 524.475 162.445 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 133.021 Tm (The) Tj 0 g 1 0 0 1 106.893 133.021 Tm (NEW) Tj 0 g 1 0 0 1 153.891 133.021 Tm (connection) Tj 0 g 1 0 0 1 245.943 133.021 Tm (state,) Tj 0 g 1 0 0 1 294.975 133.021 Tm (Part) Tj 0 g 1 0 0 1 332.991 133.021 Tm (2) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 109.397 Tm (I've) Tj 0 g 1 0 0 1 90.708 109.397 Tm (described) Tj 0 g 1 0 0 1 141.451 109.397 Tm (outgoing) Tj 0 g 1 0 0 1 186.705 109.397 Tm (NEW) Tj 0 g 1 0 0 1 215.426 109.397 Tm (packets,) Tj 0 g 1 0 0 1 259.448 109.397 Tm (but) Tj 0 g 1 0 0 1 277.796 109.397 Tm (it's) Tj 0 g 1 0 0 1 293.955 109.397 Tm (also) Tj 0 g 1 0 0 1 317.187 109.397 Tm (very) Tj 0 g 1 0 0 1 341.024 109.397 Tm (possible) Tj 0 g 1 0 0 1 384.43 109.397 Tm (\(and) Tj 0 g 1 0 0 1 409.499 109.397 Tm (common\)) Tj 0 g 1 0 0 1 458.394 109.397 Tm (to) Tj 0 g 1 0 0 1 470.626 109.397 Tm (have) Tj 0 g 1 0 0 1 70.875 96.222 Tm (incoming) Tj 0 g 1 0 0 1 117.944 96.222 Tm (NEW) Tj 0 g 1 0 0 1 146.665 96.222 Tm (packets.) Tj 0 g 1 0 0 1 190.687 96.222 Tm (Incoming) Tj 0 g 1 0 0 1 238.372 96.222 Tm (NEW) Tj 0 g 1 0 0 1 267.093 96.222 Tm (packets) Tj 0 g 1 0 0 1 308.057 96.222 Tm (generally) Tj 0 g 1 0 0 1 355.742 96.222 Tm (or 2000 iginate) Tj 0 g 1 0 0 1 400.985 96.222 Tm (from) Tj 0 g 1 0 0 1 426.043 96.222 Tm (a) Tj 0 g 1 0 0 1 435.217 96.222 Tm (remote) Tj 0 g 1 0 0 1 472.507 96.222 Tm (machine,) Tj 0 g 1 0 0 1 70.875 83.047 Tm (and) Tj 0 g 1 0 0 1 92.281 83.047 Tm (are) Tj 0 g 1 0 0 1 111.234 83.047 Tm (involved) Tj 0 g 1 0 0 1 154.64 83.047 Tm (in) Tj 0 g 1 0 0 1 166.256 83.047 Tm (initiating) Tj 0 g 1 0 0 1 209.662 83.047 Tm (a) Tj 0 g 1 0 0 1 218.836 83.047 Tm (connection) Tj /F2 11 Tf 0 g 1 0 0 1 275.09 83.047 Tm (with) Tj 0 g 1 0 0 1 297.706 83.047 Tm (you) Tj /F1 11 Tf 0 g 1 0 0 1 315.438 83.047 Tm (.) Tj 0 g 1 0 0 1 321.554 83.047 Tm (The) Tj 0 g 1 0 0 1 343.565 83.047 Tm (initial) Tj 0 g 1 0 0 1 371.681 83.047 Tm (packet\(s\)) Tj 0 g 1 0 0 1 419.971 83.047 Tm (your) Tj 0 g 1 0 0 1 444.424 83.047 Tm (Web) Tj 0 g 1 0 0 1 470.098 83.047 Tm (server) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (8) Tj ET endstream endobj 85 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 84 0 R >> endobj 86 0 obj << /Length 16076 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (receives) Tj 0 g 1 0 0 1 114.886 761.722 Tm (as) Tj 0 g 1 0 0 1 129.56 761.722 Tm (part) Tj 0 g 1 0 0 1 151.571 761.722 Tm (of) Tj 0 g 1 0 0 1 163.803 761.722 Tm (a) Tj 0 g 1 0 0 1 172.977 761.722 Tm (HTTP) Tj 0 g 1 0 0 1 204.756 761.722 Tm (request) Tj 0 g 1 0 0 1 244.499 761.722 Tm (would) Tj 0 g 1 0 0 1 276.289 761.722 Tm (be) Tj 0 g 1 0 0 1 291.579 761.722 Tm (considered) Tj 0 g 1 0 0 1 348.438 761.722 Tm (incoming) Tj 0 g 1 0 0 1 395.507 761.722 Tm (NEW) Tj 0 g 1 0 0 1 424.228 761.722 Tm (packets;) Tj 0 g 1 0 0 1 468.25 761.722 Tm (however,) Tj 0 g 1 0 0 1 70.875 748.547 Tm (once) Tj 0 g 1 0 0 1 97.781 748.547 Tm (you) Tj 0 g 1 0 0 1 118.571 748.547 Tm (reply) Tj 0 g 1 0 0 1 145.466 748.547 Tm (to) Tj 0 g 1 0 0 1 157.698 748.547 Tm (just) Tj 0 g 1 0 0 1 177.872 748.547 Tm (a) Tj 0 g 1 0 0 1 187.046 748.547 Tm (single) Tj 0 g 1 0 0 1 218.836 748.547 Tm (incoming) Tj 0 g 1 0 0 1 265.905 748.547 Tm (NEW) Tj 0 g 1 0 0 1 294.626 748.547 Tm (packet,) Tj 0 g 1 0 0 1 333.148 748.547 Tm (any) Tj 0 g 1 0 0 1 353.938 748.547 Tm (additional) Tj 0 g 1 0 0 1 404.076 748.547 Tm (packets) Tj 0 g 1 0 0 1 445.04 748.547 Tm (you) Tj 0 g 1 0 0 1 465.83 748.547 Tm (receive) Tj 0 g 1 0 0 1 504.341 748.547 Tm (that) Tj 0 g 1 0 0 1 70.875 735.372 Tm (are) Tj 0 g 1 0 0 1 89.828 735.372 Tm (related) Tj 0 g 1 0 0 1 126.513 735.372 Tm (to) Tj 0 g 1 0 0 1 138.745 735.372 Tm (this) Tj 0 g 1 0 0 1 158.919 735.372 Tm (particular) Tj 0 g 1 0 0 1 207.209 735.372 Tm (connection) Tj 0 g 1 0 0 1 263.463 735.372 Tm (are) Tj 0 g 1 0 0 1 282.416 735.372 Tm (no) Tj 0 g 1 0 0 1 297.706 735.372 Tm (longer) Tj 0 g 1 0 0 1 331.333 735.372 Tm (in) Tj 0 g 1 0 0 1 342.949 735.372 Tm (the) Tj 0 g 1 0 0 1 361.297 735.372 Tm (NEW) Tj 0 g 1 0 0 1 390.018 735.372 Tm (state.) Tj ET q 0 G 70.875 714.595 m 524.475 714.595 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 685.171 Tm (The) Tj 0 g 1 0 0 1 106.893 685.171 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 235.935 685.171 Tm (state) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 661.547 Tm (Once) Tj 0 g 1 0 0 1 100.223 661.547 Tm (a) Tj 0 g 1 0 0 1 109.397 661.547 Tm (connection) Tj 0 g 1 0 0 1 165.651 661.547 Tm (has) Tj 0 g 1 0 0 1 186.441 661.547 Tm (seen) Tj 0 g 1 0 0 1 213.347 661.547 Tm (traffic) Tj 0 g 1 0 0 1 243.3 661.547 Tm (in) Tj 0 g 1 0 0 1 254.916 661.547 Tm (both) Tj 0 g 1 0 0 1 279.38 661.547 Tm (directions,) Tj 0 g 1 0 0 1 332.565 661.547 Tm (additional) Tj 0 g 1 0 0 1 382.703 661.547 Tm (packets) Tj 0 g 1 0 0 1 423.667 661.547 Tm (relating) Tj 0 g 1 0 0 1 462.794 661.547 Tm (to) Tj 0 g 1 0 0 1 475.026 661.547 Tm (this) Tj 0 g 1 0 0 1 70.875 648.372 Tm (connection) Tj 0 g 1 0 0 1 127.129 648.372 Tm (are) Tj 0 g 1 0 0 1 146.082 648.372 Tm (considered) Tj 0 g 1 0 0 1 202.941 648.372 Tm (to) Tj 0 g 1 0 0 1 215.173 648.372 Tm (be) Tj 0 g 1 0 0 1 230.463 648.372 Tm (in) Tj 0 g 1 0 0 1 242.079 648.372 Tm (an) Tj 0 g 1 0 0 1 257.369 648.372 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 336.228 648.372 Tm (state.) Tj 0 g 1 0 0 1 366.192 648.372 Tm (The) Tj 0 g 1 0 0 1 388.203 648.372 Tm (distinction) Tj 0 g 1 0 0 1 440.167 648.372 Tm (between) Tj 0 g 1 0 0 1 484.805 648.372 Tm (NEW) Tj 0 g 1 0 0 1 70.875 635.197 Tm (and) Tj 0 g 1 0 0 1 92.281 635.197 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 171.14 635.197 Tm (is) Tj 0 g 1 0 0 1 182.14 635.197 Tm (an) Tj 0 g 1 0 0 1 197.43 635.197 Tm (important) Tj 0 g 1 0 0 1 246.336 635.197 Tm (one,) Tj 0 g 1 0 0 1 270.8 635.197 Tm (as) Tj 0 g 1 0 0 1 285.474 635.197 Tm (we'll) Tj 0 g 1 0 0 1 309.575 635.197 Tm (see) Tj 0 g 1 0 0 1 330.365 635.197 Tm (in) Tj 0 g 1 0 0 1 341.981 635.197 Tm (a) Tj 0 g 1 0 0 1 351.155 635.197 Tm (minute.) Tj ET q 0 G 70.875 614.42 m 524.475 614.42 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 584.996 Tm (The) Tj 0 g 1 0 0 1 106.893 584.996 Tm (RELATED) Tj 0 g 1 0 0 1 194.913 584.996 Tm (state) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 561.372 Tm (The) Tj 0 g 1 0 0 1 92.886 561.372 Tm (third) Tj 0 g 1 0 0 1 117.339 561.372 Tm (connection) Tj 0 g 1 0 0 1 173.593 561.372 Tm (state) Tj 0 g 1 0 0 1 200.499 561.372 Tm (category) Tj 0 g 1 0 0 1 245.742 561.372 Tm (is) Tj 0 g 1 0 0 1 256.742 561.372 Tm (called) Tj 0 g 1 0 0 1 288.532 561.372 Tm (RELATED.) Tj 0 g 1 0 0 1 345.38 561.372 Tm (RELATED) Tj 0 g 1 0 0 1 399.17 561.372 Tm (packets) Tj 0 g 1 0 0 1 440.134 561.372 Tm (are) Tj 0 g 1 0 0 1 459.087 561.372 Tm (those) Tj 0 g 1 0 0 1 489.051 561.372 Tm (that) Tj 0 g 1 0 0 1 70.875 548.197 Tm (are) Tj 0 g 1 0 0 1 89.828 548.197 Tm (starting) Tj 0 g 1 0 0 1 128.955 548.197 Tm (a) Tj 0 g 1 0 0 1 138.129 548.197 Tm (new) Tj 0 g 1 0 0 1 161.361 548.197 Tm (connection,) Tj 0 g 1 0 0 1 220.673 548.197 Tm (but) Tj 0 g 1 0 0 1 239.021 548.197 Tm (are) Tj 0 g 1 0 0 1 257.974 548.197 Tm (related) Tj 0 g 1 0 0 1 294.659 548.197 Tm (to) Tj 0 g 1 0 0 1 306.891 548.197 Tm (another) Tj 0 g 1 0 0 1 347.25 548.197 Tm (currently) Tj 0 g 1 0 0 1 392.482 548.197 Tm (existing) Tj 0 g 1 0 0 1 432.83 548.197 Tm (connection.) Tj 0 g 1 0 0 1 492.142 548.197 Tm (The) Tj 0 g 1 0 0 1 70.875 535.022 Tm (RELATED) Tj 0 g 1 0 0 1 124.665 535.022 Tm (state) Tj 0 g 1 0 0 1 151.571 535.022 Tm (can) Tj 0 g 1 0 0 1 172.361 535.022 Tm (be) Tj 0 g 1 0 0 1 187.651 535.022 Tm (used) Tj 0 g 1 0 0 1 214.557 535.022 Tm (to) Tj 0 g 1 0 0 1 226.789 535.022 Tm (regulate) Tj 0 g 1 0 0 1 269.59 535.022 Tm (connections) Tj 0 g 1 0 0 1 331.344 535.022 Tm (that) Tj 0 g 1 0 0 1 352.75 535.022 Tm (are) Tj 0 g 1 0 0 1 371.703 535.022 Tm (part) Tj 0 g 1 0 0 1 393.714 535.022 Tm (of) Tj 0 g 1 0 0 1 405.946 535.022 Tm (a) Tj 0 g 1 0 0 1 415.12 535.022 Tm (multi-connection) Tj 0 g 1 0 0 1 70.875 521.847 Tm (protocol,) Tj 0 g 1 0 0 1 116.118 521.847 Tm (such) Tj 0 g 1 0 0 1 142.408 521.847 Tm (as) Tj 0 g 1 0 0 1 157.082 521.847 Tm (ftp,) Tj 0 g 1 0 0 1 175.43 521.847 Tm (as) Tj 0 g 1 0 0 1 190.104 521.847 Tm (well) Tj 0 g 1 0 0 1 212.104 521.847 Tm (as) Tj 0 g 1 0 0 1 226.778 521.847 Tm (error) Tj 0 g 1 0 0 1 253.057 521.847 Tm (packets) Tj 0 g 1 0 0 1 294.021 521.847 Tm (related) Tj 0 g 1 0 0 1 330.706 521.847 Tm (to) Tj 0 g 1 0 0 1 342.938 521.847 Tm (existing) Tj 0 g 1 0 0 1 383.286 521.847 Tm (connections) Tj 0 g 1 0 0 1 445.04 521.847 Tm (\(such) Tj 0 g 1 0 0 1 474.993 521.847 Tm (as) Tj 0 g 1 0 0 1 489.667 521.847 Tm (ICMP) Tj 0 g 1 0 0 1 70.875 508.672 Tm (error) Tj 0 g 1 0 0 1 97.154 508.672 Tm (packets) Tj 0 g 1 0 0 1 138.118 508.672 Tm (related) Tj 0 g 1 0 0 1 174.803 508.672 Tm (to) Tj 0 g 1 0 0 1 187.035 508.672 Tm (an) Tj 0 g 1 0 0 1 202.325 5 2000 08.672 Tm (existing) Tj 0 g 1 0 0 1 242.673 508.672 Tm (connection\).) Tj ET q 0 G 70.875 487.895 m 524.475 487.895 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 458.471 Tm (The) Tj 0 g 1 0 0 1 106.893 458.471 Tm (INVALID) Tj 0 g 1 0 0 1 181.917 458.471 Tm (state) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 434.847 Tm (Finally,) Tj 0 g 1 0 0 1 108.77 434.847 Tm (there) Tj 0 g 1 0 0 1 136.897 434.847 Tm (are) Tj 0 g 1 0 0 1 155.85 434.847 Tm (INVALID) Tj 0 g 1 0 0 1 201.698 434.847 Tm (packets) Tj 0 g 1 0 0 1 242.662 434.847 Tm (--) Tj 0 g 1 0 0 1 258.568 434.847 Tm (those) Tj 0 g 1 0 0 1 288.532 434.847 Tm (that) Tj 0 g 1 0 0 1 309.938 434.847 Tm (can't) Tj 0 g 1 0 0 1 335.887 434.847 Tm (be) Tj 0 g 1 0 0 1 351.177 434.847 Tm (classified) Tj 0 g 1 0 0 1 399.467 434.847 Tm (into) Tj 0 g 1 0 0 1 420.257 434.847 Tm (one) Tj 0 g 1 0 0 1 441.663 434.847 Tm (of) Tj 0 g 1 0 0 1 453.895 434.847 Tm (the) Tj 0 g 1 0 0 1 472.243 434.847 Tm (above) Tj 0 g 1 0 0 1 70.875 421.672 Tm (three) Tj 0 g 1 0 0 1 99.002 421.672 Tm (categories.) Tj 0 g 1 0 0 1 155.861 421.672 Tm (It's) Tj 0 g 1 0 0 1 172.636 421.672 Tm (important) Tj 0 g 1 0 0 1 221.542 421.672 Tm (to) Tj 0 g 1 0 0 1 233.774 421.672 Tm (note) Tj 0 g 1 0 0 1 258.238 421.672 Tm (that) Tj 0 g 1 0 0 1 279.644 421.672 Tm (if) Tj 0 g 1 0 0 1 288.202 421.672 Tm (a) Tj 0 g 1 0 0 1 297.376 421.672 Tm (packet) Tj 0 g 1 0 0 1 332.84 421.672 Tm (is) Tj 0 g 1 0 0 1 343.84 421.672 Tm (considered) Tj 0 g 1 0 0 1 400.699 421.672 Tm (INVALID,) Tj 0 g 1 0 0 1 449.605 421.672 Tm (it) Tj 0 g 1 0 0 1 458.163 421.672 Tm (isn't) Tj 0 g 1 0 0 1 70.875 408.497 Tm (automatically) Tj 0 g 1 0 0 1 138.118 408.497 Tm (discarded;) Tj 0 g 1 0 0 1 191.919 408.497 Tm (it's) Tj 0 g 1 0 0 1 208.078 408.497 Tm (still) Tj 0 g 1 0 0 1 227.02 408.497 Tm (up) Tj 0 g 1 0 0 1 242.31 408.497 Tm (to) Tj 0 g 1 0 0 1 254.542 408.497 Tm (you) Tj 0 g 1 0 0 1 275.332 408.497 Tm (to) Tj 0 g 1 0 0 1 287.564 408.497 Tm (insert) Tj 0 g 1 0 0 1 317.517 408.497 Tm (the) Tj 0 g 1 0 0 1 335.865 408.497 Tm (appropriate) Tj 0 g 1 0 0 1 394.561 408.497 Tm (rules) Tj 0 g 1 0 0 1 421.456 408.497 Tm (and) Tj 0 g 1 0 0 1 442.862 408.497 Tm (set) Tj 0 g 1 0 0 1 460.594 408.497 Tm (chain) Tj 0 g 1 0 0 1 489.942 408.497 Tm (policy) Tj 0 g 1 0 0 1 70.875 395.322 Tm (so) Tj 0 g 1 0 0 1 85.549 395.322 Tm (that) Tj 0 g 1 0 0 1 106.955 395.322 Tm (they're) Tj 0 g 1 0 0 1 142.683 395.322 Tm (handled) Tj 0 g 1 0 0 1 184.879 395.322 Tm (correctly.) Tj ET q 0 G 70.875 374.545 m 524.475 374.545 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 345.121 Tm (Adding) Tj 0 g 1 0 0 1 131.913 345.121 Tm (a) Tj 0 g 1 0 0 1 146.925 345.121 Tm (stateful) Tj 0 g 1 0 0 1 209.961 345.121 Tm (rule) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 321.497 Tm (OK,) Tj 0 g 1 0 0 1 92.886 321.497 Tm (now) Tj 0 g 1 0 0 1 116.118 321.497 Tm (that) Tj 0 g 1 0 0 1 137.524 321.497 Tm (we) Tj 0 g 1 0 0 1 154.64 321.497 Tm (have) Tj 0 g 1 0 0 1 181.546 321.497 Tm (a) Tj 0 g 1 0 0 1 190.72 321.497 Tm (good) Tj 0 g 1 0 0 1 218.242 321.497 Tm (understanding) Tj 0 g 1 0 0 1 291.007 321.497 Tm (of) Tj 0 g 1 0 0 1 303.239 321.497 Tm (connection) Tj 0 g 1 0 0 1 359.493 321.497 Tm (tracking,) Tj 0 g 1 0 0 1 404.12 321.497 Tm (it's) Tj 0 g 1 0 0 1 420.279 321.497 Tm (time) Tj 0 g 1 0 0 1 444.116 321.497 Tm (to) Tj 0 g 1 0 0 1 456.348 321.497 Tm (take) Tj 0 g 1 0 0 1 480.196 321.497 Tm (a) Tj 0 g 1 0 0 1 489.37 321.497 Tm (look) Tj 0 g 1 0 0 1 512.602 321.497 Tm (at) Tj 0 g 1 0 0 1 70.875 308.322 Tm (a) Tj 0 g 1 0 0 1 80.049 308.322 Tm (single) Tj 0 g 1 0 0 1 111.839 308.322 Tm (additional) Tj 0 g 1 0 0 1 161.977 308.322 Tm (rule) Tj 0 g 1 0 0 1 183.372 308.322 Tm (that) Tj 0 g 1 0 0 1 204.778 308.322 Tm (transforms) Tj 0 g 1 0 0 1 259.789 308.322 Tm (our) Tj 0 g 1 0 0 1 278.742 308.322 Tm (non-functional) Tj 0 g 1 0 0 1 353.652 308.322 Tm (firewall) Tj 0 g 1 0 0 1 390.931 308.322 Tm (into) Tj 0 g 1 0 0 1 411.721 308.322 Tm (something) Tj 0 g 1 0 0 1 465.522 308.322 Tm (quite) Tj 0 g 1 0 0 1 70.875 295.147 Tm (useful:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 268.951 Tm (iptables) Tj 0 g 1 0 0 1 136.875 268.951 Tm (-P) Tj 0 g 1 0 0 1 156.675 268.951 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 268.951 Tm (DROP) Tj 0 g 1 0 0 1 77.475 257.305 Tm (iptables) Tj 0 g 1 0 0 1 136.875 257.305 Tm (-A) Tj 0 g 1 0 0 1 156.675 257.305 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 257.305 Tm (-i) Tj 0 g 1 0 0 1 216.075 257.305 Tm (!) Tj 0 g 1 0 0 1 229.275 257.305 Tm (eth1) Tj 0 g 1 0 0 1 262.275 257.305 Tm (-j) Tj 0 g 1 0 0 1 282.075 257.305 Tm (ACCEPT) Tj 0 g 1 0 0 1 77.475 245.659 Tm (iptables) Tj 0 g 1 0 0 1 136.875 245.659 Tm (-A) Tj 0 g 1 0 0 1 156.675 245.659 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 245.659 Tm (-m) Tj 0 g 1 0 0 1 216.075 245.659 Tm (state) Tj 0 g 1 0 0 1 255.675 245.659 Tm (--state) Tj 0 g 1 0 0 1 308.475 245.659 Tm (ESTABLISHED,RELATED) Tj 0 g 1 0 0 1 440.475 245.659 Tm (-j) Tj 0 g 1 0 0 1 460.275 245.659 Tm (ACCEPT) Tj ET q 0 G 70.875 213.786 m 524.475 213.786 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 184.362 Tm (How) Tj 0 g 1 0 0 1 111.879 184.362 Tm (the) Tj 0 g 1 0 0 1 141.903 184.362 Tm (rule) Tj 0 g 1 0 0 1 176.913 184.362 Tm (works) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 160.738 Tm (This) Tj 0 g 1 0 0 1 94.712 160.738 Tm (single) Tj 0 g 1 0 0 1 126.502 160.738 Tm (rule,) Tj 0 g 1 0 0 1 150.955 160.738 Tm (when) Tj 0 g 1 0 0 1 180.303 160.738 Tm (inserted) Tj 0 g 1 0 0 1 222.488 160.738 Tm (at) Tj 0 g 1 0 0 1 234.72 160.738 Tm (the) Tj 0 g 1 0 0 1 253.068 160.738 Tm (end) Tj 0 g 1 0 0 1 274.474 160.738 Tm (of) Tj 0 g 1 0 0 1 286.706 160.738 Tm (our) Tj 0 g 1 0 0 1 305.659 160.738 Tm (existing) Tj 0 g 1 0 0 1 346.007 160.738 Tm (INPUT) Tj 0 g 1 0 0 1 382.065 160.738 Tm (chain,) Tj 0 g 1 0 0 1 414.471 160.738 Tm (will) Tj 0 g 1 0 0 1 432.797 160.738 Tm (allow) Tj 0 g 1 0 0 1 460.913 160.738 Tm (us) Tj 0 g 1 0 0 1 475.587 160.738 Tm (to) Tj 0 g 1 0 0 1 70.875 147.563 Tm (establish) Tj 0 g 1 0 0 1 117.339 147.563 Tm (connections) Tj 0 g 1 0 0 1 179.093 147.563 Tm (with) Tj 0 g 1 0 0 1 201.709 147.563 Tm (remote) Tj 0 g 1 0 0 1 238.999 147.563 Tm (machines.) Tj 0 g 1 0 0 1 292.184 147.563 Tm (It) Tj 0 g 1 0 0 1 301.358 147.563 Tm (works) Tj 0 g 1 0 0 1 333.137 147.563 Tm (as) Tj 0 g 1 0 0 1 347.811 147.563 Tm (follows.) Tj 0 g 1 0 0 1 387.543 147.563 Tm (Let's) Tj 0 g 1 0 0 1 413.492 147.563 Tm (say) Tj 0 g 1 0 0 1 433.666 147.563 Tm (we) Tj 0 g 1 0 0 1 450.782 147.563 Tm (want) Tj 0 g 1 0 0 1 477.072 147.563 Tm (to) Tj 0 g 1 0 0 1 489.304 147.563 Tm (ssh) Tj 0 g 1 0 0 1 70.875 134.388 Tm (over) Tj 0 g 1 0 0 1 95.328 134.388 Tm (to) Tj 0 g 1 0 0 1 107.56 134.388 Tm (remote.host.com.) Tj 0 g 1 0 0 1 195.593 134.388 Tm (After) Tj 0 g 1 0 0 1 221.883 134.388 Tm (typing) Tj 0 g 1 0 0 1 254.289 134.388 Tm ("ssh) Tj 0 g 1 0 0 1 278.368 134.388 Tm (remote.host.com",) Tj 0 g 1 0 0 1 370.306 134.388 Tm (our) Tj 0 g 1 0 0 1 389.259 134.388 Tm (machine) Tj 0 g 1 0 0 1 433.886 134.388 Tm (sends) Tj 0 g 1 0 0 1 466.292 134.388 Tm (out) Tj 0 g 1 0 0 1 484.64 134.388 Tm (a) Tj 0 g 1 0 0 1 70.875 121.213 Tm (packet) Tj 0 g 1 0 0 1 106.339 121.213 Tm (to) Tj 0 g 1 0 0 1 118.571 121.213 Tm (initiate) Tj 0 g 1 0 0 1 153.419 121.213 Tm (the) Tj 0 g 1 0 0 1 171.767 121.213 Tm (connection.) Tj 0 g 1 0 0 1 231.079 121.213 Tm (This) Tj 0 g 1 0 0 1 254.916 121.213 Tm (particular) Tj 0 g 1 0 0 1 303.206 121.213 Tm (packet) Tj 0 g 1 0 0 1 338.67 121.213 Tm (is) Tj 0 g 1 0 0 1 349.67 121.213 Tm (in) Tj 0 g 1 0 0 1 361.286 121.213 Tm (the) Tj 0 g 1 0 0 1 379.634 121.213 Tm (NEW) Tj 0 g 1 0 0 1 408.355 121.213 Tm (state,) Tj 0 g 1 0 0 1 438.319 121.213 Tm (and) Tj 0 g 1 0 0 1 459.725 121.213 Tm (our) Tj 0 g 1 0 0 1 478.678 121.213 Tm (firewall) Tj 0 g 1 0 0 1 70.875 108.038 Tm (allows) Tj 0 g 1 0 0 1 104.491 108.038 Tm (it) Tj 0 g 1 0 0 1 113.049 108.038 Tm (out,) Tj 0 g 1 0 0 1 134.455 108.038 Tm (because) Tj 0 g 1 0 0 1 179.093 108.038 Tm (we're) Tj 0 g 1 0 0 1 208.089 108.038 Tm (only) Tj 0 g 1 0 0 1 231.321 108.038 Tm (blocking) Tj 0 g 1 0 0 1 274.727 108.038 Tm (packets) Tj 0 g 1 0 0 1 315.691 108.038 Tm (coming) Tj /F2 11 Tf 0 g 1 0 0 1 354.202 108.038 Tm (in) Tj /F1 11 Tf 0 g 1 0 0 1 365.818 108.038 Tm (to) Tj 0 g 1 0 0 1 378.05 108.038 Tm (our) Tj 0 g 1 0 0 1 397.003 108.038 Tm (firewall,) T 2000 j 0 g 1 0 0 1 437.34 108.038 Tm (not) Tj 0 g 1 0 0 1 455.688 108.038 Tm (going) Tj 0 g 1 0 0 1 485.652 108.038 Tm (out.) Tj 0 g 1 0 0 1 70.875 80.863 Tm (When) Tj 0 g 1 0 0 1 102.665 80.863 Tm (we) Tj 0 g 1 0 0 1 119.781 80.863 Tm (get) Tj 0 g 1 0 0 1 138.129 80.863 Tm (a) Tj 0 g 1 0 0 1 147.303 80.863 Tm (reply) Tj 0 g 1 0 0 1 174.198 80.863 Tm (packet) Tj 0 g 1 0 0 1 209.662 80.863 Tm (from) Tj 0 g 1 0 0 1 234.72 80.863 Tm (remote.host.com,) Tj 0 g 1 0 0 1 322.753 80.863 Tm (this) Tj 0 g 1 0 0 1 342.927 80.863 Tm (packet) Tj 0 g 1 0 0 1 378.391 80.863 Tm (trickles) Tj 0 g 1 0 0 1 415.67 80.863 Tm (through) Tj 0 g 1 0 0 1 456.029 80.863 Tm (our) Tj 0 g 1 0 0 1 474.982 80.863 Tm (INPUT) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 491.405 47.32 Tm (Page) Tj 0 g 1 0 0 1 517.535 47.32 Tm (9) Tj ET endstream endobj 87 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 86 0 R >> endobj 88 0 obj << /Length 19620 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (chain.) Tj 0 g 1 0 0 1 103.281 761.722 Tm (It) Tj 0 g 1 0 0 1 112.455 761.722 Tm (doesn't) Tj 0 g 1 0 0 1 150.636 761.722 Tm (match) Tj 0 g 1 0 0 1 183.647 761.722 Tm (our) Tj 0 g 1 0 0 1 202.6 761.722 Tm (first) Tj 0 g 1 0 0 1 223.379 761.722 Tm (rule) Tj 0 g 1 0 0 1 244.774 761.722 Tm (\(since) Tj 0 g 1 0 0 1 277.169 761.722 Tm (it) Tj 0 g 1 0 0 1 285.727 761.722 Tm (comes) Tj 0 g 1 0 0 1 321.18 761.722 Tm (in) Tj 0 g 1 0 0 1 332.796 761.722 Tm (on) Tj 0 g 1 0 0 1 348.086 761.722 Tm (eth1\),) Tj 0 g 1 0 0 1 379.271 761.722 Tm (so) Tj 0 g 1 0 0 1 393.945 761.722 Tm (it) Tj 0 g 1 0 0 1 402.503 761.722 Tm (moves) Tj 0 g 1 0 0 1 437.956 761.722 Tm (on) Tj 0 g 1 0 0 1 453.246 761.722 Tm (to) Tj 0 g 1 0 0 1 465.478 761.722 Tm (our) Tj 0 g 1 0 0 1 484.431 761.722 Tm (next,) Tj 0 g 1 0 0 1 70.875 748.547 Tm (and) Tj 0 g 1 0 0 1 92.281 748.547 Tm (final) Tj 0 g 1 0 0 1 115.513 748.547 Tm (rule.) Tj 0 g 1 0 0 1 139.966 748.547 Tm (If) Tj 0 g 1 0 0 1 149.14 748.547 Tm (it) Tj 0 g 1 0 0 1 157.698 748.547 Tm (matches) Tj 0 g 1 0 0 1 202.325 748.547 Tm (this) Tj 0 g 1 0 0 1 222.499 748.547 Tm (rule,) Tj 0 g 1 0 0 1 246.952 748.547 Tm (it) Tj 0 g 1 0 0 1 255.51 748.547 Tm (will) Tj 0 g 1 0 0 1 273.836 748.547 Tm (be) Tj 0 g 1 0 0 1 289.126 748.547 Tm (accepted,) Tj 0 g 1 0 0 1 339.88 748.547 Tm (and) Tj 0 g 1 0 0 1 361.286 748.547 Tm (if) Tj 0 g 1 0 0 1 369.844 748.547 Tm (it) Tj 0 g 1 0 0 1 378.402 748.547 Tm (doesn't,) Tj 0 g 1 0 0 1 419.641 748.547 Tm (it) Tj 0 g 1 0 0 1 428.199 748.547 Tm (will) Tj 0 g 1 0 0 1 446.525 748.547 Tm (fall) Tj 0 g 1 0 0 1 463.641 748.547 Tm (off) Tj 0 g 1 0 0 1 478.931 748.547 Tm (the) Tj 0 g 1 0 0 1 497.279 748.547 Tm (end) Tj 0 g 1 0 0 1 70.875 735.372 Tm (of) Tj 0 g 1 0 0 1 83.107 735.372 Tm (the) Tj 0 g 1 0 0 1 101.455 735.372 Tm (INPUT) Tj 0 g 1 0 0 1 137.513 735.372 Tm (chain) Tj 0 g 1 0 0 1 166.861 735.372 Tm (and) Tj 0 g 1 0 0 1 188.267 735.372 Tm (the) Tj 0 g 1 0 0 1 206.615 735.372 Tm (default) Tj 0 g 1 0 0 1 242.695 735.372 Tm (policy) Tj 0 g 1 0 0 1 273.869 735.372 Tm (will) Tj 0 g 1 0 0 1 292.195 735.372 Tm (be) Tj 0 g 1 0 0 1 307.485 735.372 Tm (applied) Tj 0 g 1 0 0 1 346.007 735.372 Tm (to) Tj 0 g 1 0 0 1 358.239 735.372 Tm (the) Tj 0 g 1 0 0 1 376.587 735.372 Tm (packet) Tj 0 g 1 0 0 1 412.051 735.372 Tm (\(DROP\).) Tj 0 g 1 0 0 1 457.272 735.372 Tm (So,) Tj 0 g 1 0 0 1 476.841 735.372 Tm (is) Tj 0 g 1 0 0 1 487.841 735.372 Tm (this) Tj 0 g 1 0 0 1 70.875 722.197 Tm (incoming) Tj 0 g 1 0 0 1 117.944 722.197 Tm (reply) Tj 0 g 1 0 0 1 144.839 722.197 Tm (packet) Tj 0 g 1 0 0 1 180.303 722.197 Tm (accepted) Tj 0 g 1 0 0 1 227.999 722.197 Tm (or) Tj 0 g 1 0 0 1 240.836 722.197 Tm (dropped) Tj 0 g 1 0 0 1 284.253 722.197 Tm (on) Tj 0 g 1 0 0 1 299.543 722.197 Tm (the) Tj 0 g 1 0 0 1 317.891 722.197 Tm (floor?) Tj ET q 0 G 70.875 701.42 m 524.475 701.42 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 671.996 Tm (How) Tj 0 g 1 0 0 1 111.879 671.996 Tm (the) Tj 0 g 1 0 0 1 141.903 671.996 Tm (rule) Tj 0 g 1 0 0 1 176.913 671.996 Tm (works,) Tj 0 g 1 0 0 1 233.919 671.996 Tm (continued) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 648.372 Tm (Answer:) Tj 0 g 1 0 0 1 113.665 648.372 Tm (accepted.) Tj 0 g 1 0 0 1 164.419 648.372 Tm (When) Tj 0 g 1 0 0 1 196.209 648.372 Tm (the) Tj 0 g 1 0 0 1 214.557 648.372 Tm (kernel) Tj 0 g 1 0 0 1 247.568 648.372 Tm (inspects) Tj 0 g 1 0 0 1 290.974 648.372 Tm (this) Tj 0 g 1 0 0 1 311.148 648.372 Tm (incoming) Tj 0 g 1 0 0 1 358.217 648.372 Tm (packet,) Tj 0 g 1 0 0 1 396.739 648.372 Tm (it) Tj 0 g 1 0 0 1 405.297 648.372 Tm (first) Tj 0 g 1 0 0 1 426.076 648.372 Tm (recognizes) Tj 0 g 1 0 0 1 482.319 648.372 Tm (that) Tj 0 g 1 0 0 1 503.725 648.372 Tm (it's) Tj 0 g 1 0 0 1 70.875 635.197 Tm (part) Tj 0 g 1 0 0 1 92.886 635.197 Tm (of) Tj 0 g 1 0 0 1 105.118 635.197 Tm (an) Tj 0 g 1 0 0 1 120.408 635.197 Tm (already) Tj 0 g 1 0 0 1 159.535 635.197 Tm (existing) Tj 0 g 1 0 0 1 199.883 635.197 Tm (connection.) Tj 0 g 1 0 0 1 259.195 635.197 Tm (Then,) Tj 0 g 1 0 0 1 290.38 635.197 Tm (the) Tj 0 g 1 0 0 1 308.728 635.197 Tm (kernel) Tj 0 g 1 0 0 1 341.739 635.197 Tm (needs) Tj 0 g 1 0 0 1 374.761 635.197 Tm (to) Tj 0 g 1 0 0 1 386.993 635.197 Tm (decide) Tj 0 g 1 0 0 1 422.457 635.197 Tm (whether) Tj 0 g 1 0 0 1 464.642 635.197 Tm (this) Tj 0 g 1 0 0 1 484.816 635.197 Tm (is) Tj 0 g 1 0 0 1 495.816 635.197 Tm (a) Tj 0 g 1 0 0 1 70.875 622.022 Tm (NEW) Tj 0 g 1 0 0 1 99.596 622.022 Tm (or) Tj 0 g 1 0 0 1 112.433 622.022 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 191.292 622.022 Tm (packet.) Tj 0 g 1 0 0 1 229.814 622.022 Tm (Since) Tj 0 g 1 0 0 1 260.383 622.022 Tm (this) Tj 0 g 1 0 0 1 280.557 622.022 Tm (is) Tj 0 g 1 0 0 1 291.557 622.022 Tm (an) Tj 0 g 1 0 0 1 306.847 622.022 Tm (incoming) Tj 0 g 1 0 0 1 353.916 622.022 Tm (packet,) Tj 0 g 1 0 0 1 392.438 622.022 Tm (it) Tj 0 g 1 0 0 1 400.996 622.022 Tm (checks) Tj 0 g 1 0 0 1 438.286 622.022 Tm (to) Tj 0 g 1 0 0 1 450.518 622.022 Tm (see) Tj 0 g 1 0 0 1 471.308 622.022 Tm (if) Tj 0 g 1 0 0 1 479.866 622.022 Tm (this) Tj 0 g 1 0 0 1 70.875 608.847 Tm (connection) Tj 0 g 1 0 0 1 127.129 608.847 Tm (has) Tj 0 g 1 0 0 1 147.919 608.847 Tm (had) Tj 0 g 1 0 0 1 169.325 608.847 Tm (any) Tj 0 g 1 0 0 1 190.115 608.847 Tm (outgoing) Tj 0 g 1 0 0 1 235.369 608.847 Tm (traffic,) Tj 0 g 1 0 0 1 268.38 608.847 Tm (and) Tj 0 g 1 0 0 1 289.786 608.847 Tm (finds) Tj 0 g 1 0 0 1 316.076 608.847 Tm (that) Tj 0 g 1 0 0 1 337.482 608.847 Tm (it) Tj 0 g 1 0 0 1 346.04 608.847 Tm (has) Tj 0 g 1 0 0 1 366.83 608.847 Tm (\(our) Tj 0 g 1 0 0 1 389.446 608.847 Tm (initial) Tj 0 g 1 0 0 1 417.562 608.847 Tm (NEW) Tj 0 g 1 0 0 1 446.283 608.847 Tm (packet) Tj 0 g 1 0 0 1 481.747 608.847 Tm (that) Tj 0 g 1 0 0 1 503.153 608.847 Tm (we) Tj 0 g 1 0 0 1 70.875 595.672 Tm (sent) Tj 0 g 1 0 0 1 94.723 595.672 Tm (out\).) Tj 0 g 1 0 0 1 119.792 595.672 Tm (Therefore,) Tj 0 g 1 0 0 1 173.593 595.672 Tm (this) Tj 0 g 1 0 0 1 193.767 595.672 Tm (incoming) Tj 0 g 1 0 0 1 240.836 595.672 Tm (packet) Tj 0 g 1 0 0 1 276.3 595.672 Tm (is) Tj 0 g 1 0 0 1 287.3 595.672 Tm (categorized) Tj 0 g 1 0 0 1 347.217 595.672 Tm (as) Tj 0 g 1 0 0 1 361.891 595.672 Tm (ESTABLISHED,) Tj 0 g 1 0 0 1 443.808 595.672 Tm (as) Tj 0 g 1 0 0 1 458.482 595.672 Tm (are) Tj 0 g 1 0 0 1 477.435 595.672 Tm (any) Tj 0 g 1 0 0 1 70.875 582.497 Tm (further) Tj 0 g 1 0 0 1 105.723 582.497 Tm (packets) Tj 0 g 1 0 0 1 146.687 582.497 Tm (we) Tj 0 g 1 0 0 1 163.803 582.497 Tm (receive) Tj 0 g 1 0 0 1 202.314 582.497 Tm (or) Tj 0 g 1 0 0 1 215.151 582.497 Tm (send) Tj 0 g 1 0 0 1 242.057 582.497 Tm (that) Tj 0 g 1 0 0 1 263.463 582.4 2000 97 Tm (are) Tj 0 g 1 0 0 1 282.416 582.497 Tm (associated) Tj 0 g 1 0 0 1 338.054 582.497 Tm (with) Tj 0 g 1 0 0 1 360.67 582.497 Tm (this) Tj 0 g 1 0 0 1 380.844 582.497 Tm (connection.) Tj ET q 0 G 70.875 561.72 m 524.475 561.72 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 532.296 Tm (Incoming) Tj 0 g 1 0 0 1 148.905 532.296 Tm (NEW) Tj 0 g 1 0 0 1 195.903 532.296 Tm (packets) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 508.672 Tm (Now,) Tj 0 g 1 0 0 1 98.991 508.672 Tm (let's) Tj 0 g 1 0 0 1 121.266 508.672 Tm (consider) Tj 0 g 1 0 0 1 165.893 508.672 Tm (what) Tj 0 g 1 0 0 1 192.183 508.672 Tm (happens) Tj 0 g 1 0 0 1 237.437 508.672 Tm (if) Tj 0 g 1 0 0 1 245.995 508.672 Tm (someone) Tj 0 g 1 0 0 1 294.296 508.672 Tm (on) Tj 0 g 1 0 0 1 309.586 508.672 Tm (a) Tj 0 g 1 0 0 1 318.76 508.672 Tm (remote) Tj 0 g 1 0 0 1 356.05 508.672 Tm (machine) Tj 0 g 1 0 0 1 400.677 508.672 Tm (tries) Tj 0 g 1 0 0 1 424.514 508.672 Tm (to) Tj 0 g 1 0 0 1 436.746 508.672 Tm (ssh) Tj 0 g 1 0 0 1 456.92 508.672 Tm (in) Tj 0 g 1 0 0 1 468.536 508.672 Tm (to) Tj /F2 11 Tf 0 g 1 0 0 1 480.768 508.672 Tm (us) Tj /F1 11 Tf 0 g 1 0 0 1 492.384 508.672 Tm (.) Tj 0 g 1 0 0 1 498.5 508.672 Tm (The) Tj 0 g 1 0 0 1 70.875 495.497 Tm (initial) Tj 0 g 1 0 0 1 98.991 495.497 Tm (packet) Tj 0 g 1 0 0 1 134.455 495.497 Tm (we) Tj 0 g 1 0 0 1 151.571 495.497 Tm (receive) Tj 0 g 1 0 0 1 190.082 495.497 Tm (is) Tj 0 g 1 0 0 1 201.082 495.497 Tm (classified) Tj 0 g 1 0 0 1 249.372 495.497 Tm (as) Tj 0 g 1 0 0 1 264.046 495.497 Tm (NEW,) Tj 0 g 1 0 0 1 295.825 495.497 Tm (and) Tj 0 g 1 0 0 1 317.231 495.497 Tm (doesn't) Tj 0 g 1 0 0 1 355.412 495.497 Tm (match) Tj 0 g 1 0 0 1 388.423 495.497 Tm (rule) Tj 0 g 1 0 0 1 409.818 495.497 Tm (1,) Tj 0 g 1 0 0 1 422.05 495.497 Tm (so) Tj 0 g 1 0 0 1 436.724 495.497 Tm (it) Tj 0 g 1 0 0 1 445.282 495.497 Tm (advances) Tj 0 g 1 0 0 1 495.42 495.497 Tm (to) Tj 0 g 1 0 0 1 70.875 482.322 Tm (rule) Tj 0 g 1 0 0 1 92.27 482.322 Tm (2.) Tj 0 g 1 0 0 1 104.502 482.322 Tm (Because) Tj 0 g 1 0 0 1 150.361 482.322 Tm (this) Tj 0 g 1 0 0 1 170.535 482.322 Tm (packet) Tj 0 g 1 0 0 1 205.999 482.322 Tm (isn't) Tj 0 g 1 0 0 1 228.274 482.322 Tm (in) Tj 0 g 1 0 0 1 239.89 482.322 Tm (an) Tj 0 g 1 0 0 1 255.18 482.322 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 334.039 482.322 Tm (or) Tj 0 g 1 0 0 1 346.876 482.322 Tm (RELATED) Tj 0 g 1 0 0 1 400.666 482.322 Tm (state,) Tj 0 g 1 0 0 1 430.63 482.322 Tm (it) Tj 0 g 1 0 0 1 439.188 482.322 Tm (falls) Tj 0 g 1 0 0 1 461.804 482.322 Tm (off) Tj 0 g 1 0 0 1 477.094 482.322 Tm (the) Tj 0 g 1 0 0 1 495.442 482.322 Tm (end) Tj 0 g 1 0 0 1 70.875 469.147 Tm (of) Tj 0 g 1 0 0 1 83.107 469.147 Tm (the) Tj 0 g 1 0 0 1 101.455 469.147 Tm (INPUT) Tj 0 g 1 0 0 1 137.513 469.147 Tm (chain) Tj 0 g 1 0 0 1 166.861 469.147 Tm (and) Tj 0 g 1 0 0 1 188.267 469.147 Tm (the) Tj 0 g 1 0 0 1 206.615 469.147 Tm (default) Tj 0 g 1 0 0 1 242.695 469.147 Tm (policy,) Tj 0 g 1 0 0 1 276.927 469.147 Tm (DROP,) Tj 0 g 1 0 0 1 314.822 469.147 Tm (is) Tj 0 g 1 0 0 1 325.822 469.147 Tm (applied.) Tj 0 g 1 0 0 1 367.402 469.147 Tm (Our) Tj 0 g 1 0 0 1 388.797 469.147 Tm (incoming) Tj 0 g 1 0 0 1 435.866 469.147 Tm (ssh) Tj 0 g 1 0 0 1 456.04 469.147 Tm (connection) Tj 0 g 1 0 0 1 70.875 455.972 Tm (request) Tj 0 g 1 0 0 1 110.618 455.972 Tm (is) Tj 0 g 1 0 0 1 121.618 455.972 Tm (dropped) Tj 0 g 1 0 0 1 165.035 455.972 Tm (to) Tj 0 g 1 0 0 1 177.267 455.972 Tm (the) Tj 0 g 1 0 0 1 195.615 455.972 Tm (floor) Tj 0 g 1 0 0 1 220.068 455.972 Tm (without) Tj 0 g 1 0 0 1 257.974 455.972 Tm (so) Tj 0 g 1 0 0 1 272.648 455.972 Tm (much) Tj 0 g 1 0 0 1 302.601 455.972 Tm (as) Tj 0 g 1 0 0 1 317.275 455.972 Tm (a) Tj 0 g 1 0 0 1 326.449 455.972 Tm (reply) Tj 0 g 1 0 0 1 353.344 455.972 Tm (\(or) Tj 0 g 1 0 0 1 369.844 455.972 Tm (TCP) Tj 0 g 1 0 0 1 394.902 455.972 Tm (reset\)) Tj 0 g 1 0 0 1 426.076 455.972 Tm (from) Tj 0 g 1 0 0 1 451.134 455.972 Tm (us.) Tj ET q 0 G 70.875 435.195 m 524.475 435.195 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 405.771 Tm (A) Tj 0 g 1 0 0 1 87.885 405.771 Tm (near-perfect) Tj 0 g 1 0 0 1 194.445 405.771 Tm (firewall) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 382.147 Tm (So,) Tj 0 g 1 0 0 1 90.444 382.147 Tm (what) Tj 0 g 1 0 0 1 116.734 382.147 Tm (kind) Tj 0 g 1 0 0 1 139.966 382.147 Tm (of) Tj 0 g 1 0 0 1 152.198 382.147 Tm (firewall) Tj 0 g 1 0 0 1 189.477 382.147 Tm (do) Tj 0 g 1 0 0 1 204.767 382.147 Tm (we) Tj 0 g 1 0 0 1 221.883 382.147 Tm (have) Tj 0 g 1 0 0 1 248.789 382.147 Tm (so) Tj 0 g 1 0 0 1 263.463 382.147 Tm (far?) Tj 0 g 1 0 0 1 285.474 382.147 Tm (An) Tj 0 g 1 0 0 1 301.985 382.147 Tm (excellent) Tj 0 g 1 0 0 1 348.449 382.147 Tm (one) Tj 0 g 1 0 0 1 369.855 382.147 Tm (for) Tj 0 g 1 0 0 1 385.75 382.147 Tm (a) Tj 0 g 1 0 0 1 394.924 382.147 Tm (laptop) Tj 0 g 1 0 0 1 427.946 382.147 Tm (or) Tj 0 g 1 0 0 1 440.783 382.147 Tm (a) Tj 0 g 1 0 0 1 449.957 382.147 Tm (workstation) Tj 0 g 1 0 0 1 70.875 368.972 Tm (where) Tj 0 g 1 0 0 1 103.886 368.972 Tm (you) Tj 0 g 1 0 0 1 124.676 368.972 Tm (don't) Tj 0 g 1 0 0 1 151.241 368.972 Tm (want) Tj 0 g 1 0 0 1 177.531 368.972 Tm (anyone) Tj 0 g 1 0 0 1 216.669 368.972 Tm (from) Tj 0 g 1 0 0 1 241.727 368.972 Tm (the) Tj 0 g 1 0 0 1 260.075 368.972 Tm (Internet) Tj 0 g 1 0 0 1 300.434 368.972 Tm (connecting) Tj /F2 11 Tf 0 g 1 0 0 1 356.688 368.972 Tm (to) Tj 0 g 1 0 0 1 368.92 368.972 Tm (you) Tj /F1 11 Tf 0 g 1 0 0 1 386.652 368.972 Tm (,) Tj 0 g 1 0 0 1 392.768 368.972 Tm (but) Tj 0 g 1 0 0 1 411.116 368.972 Tm (where) Tj 0 g 1 0 0 1 444.127 368.972 Tm (you) Tj 0 g 1 0 0 1 464.917 368.972 Tm (need) Tj 0 g 1 0 0 1 492.439 368.972 Tm (to) Tj 0 g 1 0 0 1 70.875 355.797 Tm (connect) Tj 0 g 1 0 0 1 112.455 355.797 Tm (to) Tj 0 g 1 0 0 1 124.687 355.797 Tm (sites) Tj 0 g 1 0 0 1 150.361 355.797 Tm (on) Tj 0 g 1 0 0 1 165.651 355.797 Tm (the) Tj 0 g 1 0 0 1 183.999 355.797 Tm (Internet.) Tj 0 g 1 0 0 1 227.416 355.797 Tm (You'll) Tj 0 g 1 0 0 1 257.028 355.797 Tm (be) Tj 0 g 1 0 0 1 272.318 355.797 Tm (able) Tj 0 g 1 0 0 1 296.166 355.797 Tm (to) Tj 0 g 1 0 0 1 308.398 355.797 Tm (use) Tj 0 g 1 0 0 1 329.188 355.797 Tm (Netscape,) Tj 0 g 1 0 0 1 381.768 355.797 Tm (konqueror,) Tj 0 g 1 0 0 1 437.406 355.797 Tm (ftp,) Tj 0 g 1 0 0 1 455.754 355.797 Tm (ping,) Tj 0 g 1 0 0 1 482.66 355.797 Tm (perform) Tj 0 g 1 0 0 1 70.875 342.622 Tm (DNS) Tj 0 g 1 0 0 1 97.154 342.622 Tm (lookups,) Tj 0 g 1 0 0 1 141.176 342.622 Tm (and) Tj 0 g 1 0 0 1 162.582 342.622 Tm (more.) Tj 0 g 1 0 0 1 193.756 342.622 Tm (Any) Tj 0 g 1 0 0 1 215.767 342.622 Tm (connection) Tj 0 g 1 0 0 1 272.021 342.622 Tm (that) Tj 0 g 1 0 0 1 293.427 342.622 Tm (you) Tj 0 g 1 0 0 1 314.217 342.622 Tm (initiate) Tj 0 g 1 0 0 1 349.065 342.622 Tm (will) Tj 0 g 1 0 0 1 367.391 342.622 Tm (get) Tj 0 g 1 0 0 1 385.739 342.622 Tm (back) Tj 0 g 1 0 0 1 412.029 342.622 Tm (in) Tj 0 g 1 0 0 1 423.645 342.622 Tm (through) Tj 0 g 1 0 0 1 464.004 342.622 Tm (the) Tj 0 g 1 0 0 1 482.352 342.622 Tm (firewall.) Tj 0 g 1 0 0 1 70.875 329.447 Tm (However,) Tj 0 g 1 0 0 1 120.386 329.447 Tm (any) Tj 0 g 1 0 0 1 141.176 329.447 Tm (unsolicited) Tj 0 g 1 0 0 1 196.198 329.447 Tm (connection) Tj 0 g 1 0 0 1 252.452 329.447 Tm (that) Tj 0 g 1 0 0 1 273.858 329.447 Tm (comes) Tj 0 g 1 0 0 1 309.311 329.447 Tm (in) Tj 0 g 1 0 0 1 320.927 329.447 Tm (from) Tj 0 g 1 0 0 1 345.985 329.447 Tm (the) Tj 0 g 1 0 0 1 364.333 329.447 Tm (Internet) Tj 0 g 1 0 0 1 404.692 329.447 Tm (will) Tj 0 g 1 0 0 1 423.018 329.447 Tm (be) Tj 0 g 1 0 0 1 438.308 329.447 Tm (dropped,) Tj 0 g 1 0 0 1 484.783 329.447 Tm (unless) Tj 0 g 1 0 0 1 70.875 316.272 Tm (it's) Tj 0 g 1 0 0 1 87.034 316.272 Tm (related) Tj 0 g 1 0 0 1 123.719 316.272 Tm (to) Tj 0 g 1 0 0 1 135.951 316.272 Tm (an) Tj 0 g 1 0 0 1 151.241 316.272 Tm (existing) Tj 0 g 1 0 0 1 191.589 316.272 Tm (connection) Tj 0 g 1 0 0 1 247.843 316.272 Tm (that) Tj 0 g 1 0 0 1 269.249 316.272 Tm (you) Tj 0 g 1 0 0 1 290.039 316.272 Tm (initiated.) Tj 0 g 1 0 0 1 334.061 316.272 Tm (As) Tj 0 g 1 0 0 1 349.956 316.272 Tm (long) Tj 0 g 1 0 0 1 373.804 316.272 Tm (as) Tj 0 g 1 0 0 1 388.478 316.272 Tm (you) Tj 0 g 1 0 0 1 409.268 316.272 Tm (don't) Tj 0 g 1 0 0 1 435.833 316.272 Tm (need) Tj 0 g 1 0 0 1 463.355 316.272 Tm (to) 2000 Tj 0 g 1 0 0 1 475.587 316.272 Tm (provide) Tj 0 g 1 0 0 1 70.875 303.097 Tm (any) Tj 0 g 1 0 0 1 91.665 303.097 Tm (network) Tj 0 g 1 0 0 1 133.234 303.097 Tm (services) Tj 0 g 1 0 0 1 176.629 303.097 Tm (to) Tj 0 g 1 0 0 1 188.861 303.097 Tm (the) Tj 0 g 1 0 0 1 207.209 303.097 Tm (outside,) Tj 0 g 1 0 0 1 248.789 303.097 Tm (this) Tj 0 g 1 0 0 1 268.963 303.097 Tm (is) Tj 0 g 1 0 0 1 279.963 303.097 Tm (a) Tj 0 g 1 0 0 1 289.137 303.097 Tm (near-perfect) Tj 0 g 1 0 0 1 354.257 303.097 Tm (firewall.) Tj ET q 0 G 70.875 282.32 m 524.475 282.32 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 252.896 Tm (A) Tj 0 g 1 0 0 1 87.885 252.896 Tm (basic) Tj 0 g 1 0 0 1 134.901 252.896 Tm (firewall) Tj 0 g 1 0 0 1 195.903 252.896 Tm (script) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 229.272 Tm (Here's) Tj 0 g 1 0 0 1 105.371 229.272 Tm (a) Tj 0 g 1 0 0 1 114.545 229.272 Tm (simple) Tj 0 g 1 0 0 1 149.382 229.272 Tm (script) Tj 0 g 1 0 0 1 178.719 229.272 Tm (that) Tj 0 g 1 0 0 1 200.125 229.272 Tm (can) Tj 0 g 1 0 0 1 220.915 229.272 Tm (be) Tj 0 g 1 0 0 1 236.205 229.272 Tm (used) Tj 0 g 1 0 0 1 263.111 229.272 Tm (to) Tj 0 g 1 0 0 1 275.343 229.272 Tm (set) Tj 0 g 1 0 0 1 293.075 229.272 Tm (up/tear) Tj 0 g 1 0 0 1 330.376 229.272 Tm (down) Tj 0 g 1 0 0 1 359.724 229.272 Tm (our) Tj 0 g 1 0 0 1 378.677 229.272 Tm (first) Tj 0 g 1 0 0 1 399.456 229.272 Tm (basic) Tj 0 g 1 0 0 1 428.188 229.272 Tm (workstation) Tj 0 g 1 0 0 1 486.873 229.272 Tm (firewall:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 203.076 Tm (#!/bin/bash) Tj 0 g 1 0 0 1 77.475 191.43 Tm (#) Tj 0 g 1 0 0 1 90.675 191.43 Tm (A) Tj 0 g 1 0 0 1 103.875 191.43 Tm (basic) Tj 0 g 1 0 0 1 143.475 191.43 Tm (stateful) Tj 0 g 1 0 0 1 202.875 191.43 Tm (firewall) Tj 0 g 1 0 0 1 262.275 191.43 Tm (for) Tj 0 g 1 0 0 1 288.675 191.43 Tm (a) Tj 0 g 1 0 0 1 301.875 191.43 Tm (workstation) Tj 0 g 1 0 0 1 381.075 191.43 Tm (or) Tj 0 g 1 0 0 1 400.875 191.43 Tm (laptop) Tj 0 g 1 0 0 1 447.075 191.43 Tm (that) Tj 0 g 1 0 0 1 480.075 191.43 Tm (isn't) Tj 0 g 1 0 0 1 519.675 191.43 Tm (running) Tj 0 g 1 0 0 1 572.475 191.43 Tm (any) Tj 0 g 1 0 0 1 77.475 179.784 Tm (#) Tj 0 g 1 0 0 1 90.675 179.784 Tm (network) Tj 0 g 1 0 0 1 143.475 179.784 Tm (services) Tj 0 g 1 0 0 1 202.875 179.784 Tm (like) Tj 0 g 1 0 0 1 235.875 179.784 Tm (a) Tj 0 g 1 0 0 1 249.075 179.784 Tm (web) Tj 0 g 1 0 0 1 275.475 179.784 Tm (server,) Tj 0 g 1 0 0 1 328.275 179.784 Tm (SMTP) Tj 0 g 1 0 0 1 361.275 179.784 Tm (server,) Tj 0 g 1 0 0 1 414.075 179.784 Tm (ftp) Tj 0 g 1 0 0 1 440.475 179.784 Tm (server,) Tj 0 g 1 0 0 1 493.275 179.784 Tm (etc.) Tj 0 g 1 0 0 1 77.475 156.492 Tm (if) Tj 0 g 1 0 0 1 97.275 156.492 Tm ([) Tj 0 g 1 0 0 1 110.475 156.492 Tm ("$1") Tj 0 g 1 0 0 1 143.475 156.492 Tm (=) Tj 0 g 1 0 0 1 156.675 156.492 Tm ("start") Tj 0 g 1 0 0 1 209.475 156.492 Tm (]) Tj 0 g 1 0 0 1 77.475 144.846 Tm (then) Tj 0 g 1 0 0 1 130.275 133.2 Tm (echo) Tj 0 g 1 0 0 1 163.275 133.2 Tm ("Starting) Tj 0 g 1 0 0 1 229.275 133.2 Tm (firewall...") Tj 0 g 1 0 0 1 130.275 121.554 Tm (iptables) Tj 0 g 1 0 0 1 189.675 121.554 Tm (-P) Tj 0 g 1 0 0 1 209.475 121.554 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 121.554 Tm (DROP) Tj 0 g 1 0 0 1 130.275 109.908 Tm (iptables) Tj 0 g 1 0 0 1 189.675 109.908 Tm (-A) Tj 0 g 1 0 0 1 209.475 109.908 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 109.908 Tm (-i) Tj 0 g 1 0 0 1 268.875 109.908 Tm (!) Tj 0 g 1 0 0 1 282.075 109.908 Tm (eth1) Tj 0 g 1 0 0 1 315.075 109.908 Tm (-j) Tj 0 g 1 0 0 1 334.875 109.908 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 98.262 Tm (iptables) Tj 0 g 1 0 0 1 189.675 98.262 Tm (-A) Tj 0 g 1 0 0 1 209.475 98.262 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 98.262 Tm (-m) Tj 0 g 1 0 0 1 268.875 98.262 Tm (state) Tj 0 g 1 0 0 1 308.475 98.262 Tm (--state) Tj 0 g 1 0 0 1 361.275 98.262 Tm (ESTABLISHED,RELATED) Tj 0 g 1 0 0 1 493.275 98.262 Tm (-j) Tj 0 g 1 0 0 1 513.075 98.262 Tm (ACCEPT) Tj 0 g 1 0 0 1 77.475 86.616 Tm (elif) Tj 0 g 1 0 0 1 110.475 86.616 Tm ([) Tj 0 g 1 0 0 1 123.675 86.616 Tm ("$1") Tj 0 g 1 0 0 1 156.675 86.616 Tm (=) Tj 0 g 1 0 0 1 169.875 86.616 Tm ("stop") Tj 0 g 1 0 0 1 216.075 86.616 Tm (]) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (10) Tj ET endstream endobj 89 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 88 0 R >> endobj 90 0 obj << /Length 5450 >> stream BT /F9 11 Tf 0 g 1 0 0 1 77.475 762.701 Tm (then) Tj 0 g 1 0 0 1 130.275 751.055 Tm (echo) Tj 0 g 1 0 0 1 163.275 751.055 Tm ("Stopping) Tj 0 g 1 0 0 1 229.275 751.055 Tm (firewall...") Tj 0 g 1 0 0 1 130.275 739.409 Tm (iptables) Tj 0 g 1 0 0 1 189.675 739.409 Tm (-F) Tj 0 g 1 0 0 1 209.475 739.409 Tm (INPUT) Tj 0 g 1 0 0 1 130.275 727.763 Tm (iptables) Tj 0 g 1 0 0 1 189.675 727.763 Tm (-P) Tj 0 g 1 0 0 1 209.475 727.763 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 727.763 Tm (ACCEPT) Tj 0 g 1 0 0 1 77.475 716.117 Tm (fi) Tj ET q 0 G 70.875 684.244 m 524.475 684.244 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 654.82 Tm (Using) Tj 0 g 1 0 0 1 121.887 654.82 Tm (the) Tj 0 g 1 0 0 1 151.911 654.82 Tm (script) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 631.196 Tm (Using) Tj 0 g 1 0 0 1 102.049 631.196 Tm (this) Tj 0 g 1 0 0 1 122.223 631.196 Tm (script,) Tj 0 g 1 0 0 1 154.618 631.196 Tm (you) Tj 0 g 1 0 0 1 175.408 631.196 Tm (can) Tj 0 g 1 0 0 1 196.198 631.196 Tm (bring) Tj 0 g 1 0 0 1 223.709 631.196 Tm (down) Tj 0 g 1 0 0 1 253.057 631.196 Tm (the) Tj 0 g 1 0 0 1 271.405 631.196 Tm (firewall) Tj 0 g 1 0 0 1 308.684 631.196 Tm (by) Tj 0 g 1 0 0 1 323.358 631.196 Tm (typing) Tj 0 g 1 0 0 1 355.764 631.196 Tm ("./firewall) Tj 0 g 1 0 0 1 403.064 631.196 Tm (stop",) Tj 0 g 1 0 0 1 433.875 631.196 Tm (and) Tj 0 g 1 0 0 1 455.281 631.196 Tm (bring) Tj 0 g 1 0 0 1 482.792 631.196 Tm (it) Tj 0 g 1 0 0 1 491.35 631.196 Tm (back) Tj 0 g 1 0 0 1 70.875 618.021 Tm (up) Tj 0 g 1 0 0 1 86.165 618.021 Tm (again) Tj 0 g 1 0 0 1 116.129 618.021 Tm (by) Tj 0 g 1 0 0 1 130.803 618.021 Tm (typing) Tj 0 g 1 0 0 1 163.209 618.021 Tm ("./firewall) Tj 0 g 1 0 0 1 210.509 618.021 Tm (start".) Tj 0 g 1 0 0 1 241.925 618.021 Tm (To) Tj 0 g 1 0 0 1 257.82 618.021 Tm (bring) Tj 0 g 1 0 0 1 285.331 618.021 Tm (down) Tj 0 g 1 0 0 1 314.679 618.021 Tm (the) Tj 0 g 1 0 0 1 333.027 618.021 Tm (firewall,) Tj 0 g 1 0 0 1 373.364 618.021 Tm (we) Tj 0 g 1 0 0 1 390.48 618.021 Tm (flush) Tj 0 g 1 0 0 1 416.77 618.021 Tm (our) Tj 0 g 1 0 0 1 435.723 618.021 Tm (rules) Tj 0 g 1 0 0 1 462.618 618.021 Tm (out) Tj 0 g 1 0 0 1 480.966 618.021 Tm (of) Tj 0 g 1 0 0 1 493.198 618.021 Tm (the) Tj 0 g 1 0 0 1 70.875 604.846 Tm (INPUT) Tj 0 g 1 0 0 1 106.933 604.846 Tm (chain) Tj 0 g 1 0 0 1 136.281 604.846 Tm (with) Tj 0 g 1 0 0 1 158.897 604.846 Tm (a) Tj 0 g 1 0 0 1 168.071 604.846 Tm ("iptables) Tj 0 g 1 0 0 1 212.94 604.846 Tm (-F) Tj 0 g 1 0 0 1 229.143 604.846 Tm (INPUT",) Tj 0 g 1 0 0 1 272.164 604.846 Tm (and) Tj 0 g 1 0 0 1 293.57 604.846 Tm (then) Tj 0 g 1 0 0 1 318.034 604.846 Tm (switch) Tj 0 g 1 0 0 1 351.65 604.846 Tm (the) Tj 0 g 1 0 0 1 369.998 604.846 Tm (default) Tj 0 g 1 0 0 1 406.078 604.846 Tm (INPUT) Tj 0 g 1 0 0 1 442.136 604.846 Tm (policy) Tj 0 g 1 0 0 1 473.31 604.846 Tm (back) Tj 0 g 1 0 0 1 499.6 604.846 Tm (to) Tj 0 g 1 0 0 1 70.875 591.671 Tm (ACCEPT) Tj 0 g 1 0 0 1 118.549 591.671 Tm (with) Tj 0 g 1 0 0 1 141.165 591.671 Tm (a) Tj 0 g 1 0 0 1 150.339 591.671 Tm ("iptables) Tj 0 g 1 0 0 1 195.208 591.671 Tm (-P) Tj 0 g 1 0 0 1 212.027 591.671 Tm (INPUT) Tj 0 g 1 0 0 1 248.085 591.671 Tm (ACCEPT") Tj 0 g 1 0 0 1 299.664 591.671 Tm (command.) Tj 0 g 1 0 0 1 354.07 591.671 Tm (Now,) Tj 0 g 1 0 0 1 38 2000 2.186 591.671 Tm (let's) Tj 0 g 1 0 0 1 404.461 591.671 Tm (look) Tj 0 g 1 0 0 1 427.693 591.671 Tm (at) Tj 0 g 1 0 0 1 439.925 591.671 Tm (a) Tj 0 g 1 0 0 1 449.099 591.671 Tm (bunch) Tj 0 g 1 0 0 1 482.121 591.671 Tm (of) Tj 0 g 1 0 0 1 70.875 578.496 Tm (improvements) Tj 0 g 1 0 0 1 143.002 578.496 Tm (that) Tj 0 g 1 0 0 1 164.408 578.496 Tm (we) Tj 0 g 1 0 0 1 181.524 578.496 Tm (can) Tj 0 g 1 0 0 1 202.314 578.496 Tm (make) Tj 0 g 1 0 0 1 232.267 578.496 Tm (to) Tj 0 g 1 0 0 1 244.499 578.496 Tm (our) Tj 0 g 1 0 0 1 263.452 578.496 Tm (existing) Tj 0 g 1 0 0 1 303.8 578.496 Tm (workstation) Tj 0 g 1 0 0 1 362.485 578.496 Tm (firewall.) Tj 0 g 1 0 0 1 402.822 578.496 Tm (Once) Tj 0 g 1 0 0 1 432.17 578.496 Tm (I've) Tj 0 g 1 0 0 1 452.003 578.496 Tm (explained) Tj 0 g 1 0 0 1 70.875 565.321 Tm (every) Tj 0 g 1 0 0 1 100.828 565.321 Tm (improvement,) Tj 0 g 1 0 0 1 170.513 565.321 Tm (I'll) Tj 0 g 1 0 0 1 183.614 565.321 Tm (present) Tj 0 g 1 0 0 1 223.357 565.321 Tm (a) Tj 0 g 1 0 0 1 232.531 565.321 Tm (final) Tj 0 g 1 0 0 1 255.763 565.321 Tm (workstation) Tj 0 g 1 0 0 1 314.448 565.321 Tm (firewall) Tj 0 g 1 0 0 1 351.727 565.321 Tm (script.) Tj 0 g 1 0 0 1 384.122 565.321 Tm (Then,) Tj 0 g 1 0 0 1 415.307 565.321 Tm (we'll) Tj 0 g 1 0 0 1 439.408 565.321 Tm (start) Tj 0 g 1 0 0 1 463.861 565.321 Tm (customizing) Tj 0 g 1 0 0 1 70.875 552.146 Tm (our) Tj 0 g 1 0 0 1 89.828 552.146 Tm (firewall) Tj 0 g 1 0 0 1 127.107 552.146 Tm (for) Tj 0 g 1 0 0 1 143.002 552.146 Tm (servers.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (11) Tj ET endstream endobj 91 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 90 0 R >> endobj 92 0 obj << /Length 16558 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (5.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (Stateful) Tj 0 g 1 0 0 1 221.967 756.696 Tm (improvements) Tj 0 g 1 0 0 1 70.875 725.046 Tm (Explicitly) Tj 0 g 1 0 0 1 145.881 725.046 Tm (turn) Tj 0 g 1 0 0 1 181.899 725.046 Tm (off) Tj 0 g 1 0 0 1 206.919 725.046 Tm (ECN) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (I) Tj 0 g 1 0 0 1 76.991 701.422 Tm (mentioned) Tj 0 g 1 0 0 1 131.408 701.422 Tm (earlier) Tj 0 g 1 0 0 1 165.024 701.422 Tm (that) Tj 0 g 1 0 0 1 186.43 701.422 Tm (it's) Tj 0 g 1 0 0 1 202.589 701.422 Tm (important) Tj 0 g 1 0 0 1 251.495 701.422 Tm (to) Tj 0 g 1 0 0 1 263.727 701.422 Tm (turn) Tj 0 g 1 0 0 1 285.738 701.422 Tm (off) Tj 0 g 1 0 0 1 301.028 701.422 Tm (ECN) Tj 0 g 1 0 0 1 327.307 701.422 Tm (\(explicit) Tj 0 g 1 0 0 1 367.644 701.422 Tm (congestion) Tj 0 g 1 0 0 1 423.898 701.422 Tm (notification\)) Tj 0 g 1 0 0 1 483.199 701.422 Tm (so) Tj 0 g 1 0 0 1 497.873 701.422 Tm (that) Tj 0 g 1 0 0 1 70.875 688.247 Tm (Internet) Tj 0 g 1 0 0 1 111.234 688.247 Tm (communications) Tj 0 g 1 0 0 1 193.756 688.247 Tm (will) Tj 0 g 1 0 0 1 212.082 688.247 Tm (work) Tj 0 g 1 0 0 1 238.361 688.247 Tm (properly.) Tj 0 g 1 0 0 1 284.209 688.247 Tm (While) Tj 0 g 1 0 0 1 314.767 688.247 Tm (you) Tj 0 g 1 0 0 1 335.557 688.247 Tm (may) Tj 0 g 1 0 0 1 359.394 688.247 Tm (have) Tj 0 g 1 0 0 1 386.3 688.247 Tm (disabled) Tj 0 g 1 0 0 1 430.322 688.247 Tm (ECN) Tj 0 g 1 0 0 1 456.601 688.247 Tm (in) Tj 0 g 1 0 0 1 468.217 688.247 Tm (the) Tj 0 g 1 0 0 1 486.565 688.247 Tm (kernel) Tj 0 g 1 0 0 1 70.875 675.072 Tm (per) Tj 0 g 1 0 0 1 89.828 675.072 Tm (my) Tj 0 g 1 0 0 1 107.549 675.072 Tm (suggestion,) Tj 0 g 1 0 0 1 166.861 675.072 Tm (it's) Tj 0 g 1 0 0 1 183.02 675.072 Tm (possible) Tj 0 g 1 0 0 1 226.426 675.072 Tm (that) Tj 0 g 1 0 0 1 247.832 675.072 Tm (in) Tj 0 g 1 0 0 1 259.448 675.072 Tm (the) Tj 0 g 1 0 0 1 277.796 675.072 Tm (future,) Tj 0 g 1 0 0 1 312.039 675.072 Tm (you'll) Tj 0 g 1 0 0 1 339.814 675.072 Tm (forget) Tj 0 g 1 0 0 1 370.999 675.072 Tm (to) Tj 0 g 1 0 0 1 383.231 675.072 Tm (do) Tj 0 g 1 0 0 1 398.521 675.072 Tm (so.) Tj 0 g 1 0 0 1 416.253 675.072 Tm (Or,) Tj 0 g 1 0 0 1 434.59 675.072 Tm (possibly,) Tj 0 g 1 0 0 1 480.438 675.072 Tm (you'll) Tj 0 g 1 0 0 1 70.875 661.897 Tm (pass) Tj 0 g 1 0 0 1 97.165 661.897 Tm (your) Tj 0 g 1 0 0 1 121.618 661.897 Tm (firewall) Tj 0 g 1 0 0 1 158.897 661.897 Tm (script) Tj 0 g 1 0 0 1 188.234 661.897 Tm (along) Tj 0 g 1 0 0 1 218.198 661.897 Tm (to) Tj 0 g 1 0 0 1 230.43 661.897 Tm (someone) Tj 0 g 1 0 0 1 278.731 661.897 Tm (who) Tj 0 g 1 0 0 1 301.963 661.897 Tm (has) Tj 0 g 1 0 0 1 322.753 661.897 Tm (ECN) Tj 0 g 1 0 0 1 349.032 661.897 Tm (enabled.) Tj 0 g 1 0 0 1 394.286 661.897 Tm (For) Tj 0 g 1 0 0 1 413.844 661.897 Tm (these) Tj 0 g 1 0 0 1 443.808 661.897 Tm (reasons,) Tj 0 g 1 0 0 1 489.051 661.897 Tm (it's) Tj 0 g 1 0 0 1 505.21 661.897 Tm (a) Tj 0 g 1 0 0 1 70.875 648.722 Tm (good) Tj 0 g 1 0 0 1 98.397 648.722 Tm (idea) Tj 0 g 1 0 0 1 122.245 648.722 Tm (to) Tj 0 g 1 0 0 1 134.477 648.722 Tm (use) Tj 0 g 1 0 0 1 155.267 648.722 Tm (the) Tj 0 g 1 0 0 1 173.615 648.722 Tm (/proc) Tj 0 g 1 0 0 1 201.126 648.722 Tm (interface) Tj 0 g 1 0 0 1 246.369 648.722 Tm (to) Tj 0 g 1 0 0 1 258.601 648.722 Tm (explicitly) Tj 0 g 1 0 0 1 303.217 648.722 Tm (disable) Tj 0 g 1 0 0 1 341.123 648.722 Tm (ECN,) Tj 0 g 1 0 0 1 370.46 648.722 Tm (as) Tj 0 g 1 0 0 1 385.134 648.722 Tm (follows:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 622.526 Tm (if) Tj 0 g 1 0 0 1 97.275 622.526 Tm ([) Tj 0 g 1 0 0 1 110.475 622.526 Tm (-e) Tj 0 g 1 0 0 1 130.275 622.526 Tm (/proc/sys/net/ipv4/tcp_ecn) Tj 0 g 1 0 0 1 308.475 622.526 Tm (]) Tj 0 g 1 0 0 1 77.475 610.88 Tm (then) Tj 0 g 1 0 0 1 130.275 599.234 Tm (echo) Tj 0 g 1 0 0 1 163.275 599.234 Tm (0) Tj 0 g 1 0 0 1 176.475 599.234 Tm (>) Tj 0 g 1 0 0 1 189.675 599.234 Tm (/proc/sys/net/ipv4/tcp_ecn) Tj 0 g 1 0 0 1 77.475 587.588 Tm (fi) Tj ET q 0 G 70.875 555.715 m 524.475 555.715 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 526.291 Tm (Forwarding) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 502.667 Tm (If) Tj 0 g 1 0 0 1 80.049 502.667 Tm (you're) Tj 0 g 1 0 0 1 112.719 502.667 Tm (using) Tj 0 g 1 0 0 1 142.067 502.667 Tm (your) Tj 0 g 1 0 0 1 166.52 502.667 Tm (Linux) Tj 0 g 1 0 0 1 195.868 502.667 Tm (machine) Tj 0 g 1 0 0 1 240.495 502.667 Tm (as) Tj 0 g 1 0 0 1 255.169 502.667 Tm (a) Tj 0 g 1 0 0 1 264.343 502.667 Tm (router,) Tj 0 g 1 0 0 1 299.191 502.667 Tm (then) Tj 0 g 1 0 0 1 323.655 502.667 Tm (you'll) Tj 0 g 1 0 0 1 351.43 502.667 Tm (want) Tj 0 g 1 0 0 1 377.72 502.667 Tm (to) Tj 0 g 1 0 0 1 389.952 502.667 Tm (enable) Tj 0 g 1 0 0 1 426.032 502.667 Tm (IP) Tj 0 g 1 0 0 1 439.485 502.667 Tm (forwarding,) Tj 0 g 1 0 0 1 70.875 489.492 Tm (which) Tj 0 g 1 0 0 1 102.049 489.492 Tm (will) Tj 0 g 1 0 0 1 120.375 489.492 Tm (give) Tj 0 g 1 0 0 1 143.607 489.492 Tm (the) Tj 0 g 1 0 0 1 161.955 489.492 Tm (kernel) Tj 0 g 1 0 0 1 194.966 489.492 Tm (permission) Tj 0 g 1 0 0 1 251.198 489.492 Tm (to) Tj 0 g 1 0 0 1 263.43 489.492 Tm (allow) Tj 0 g 1 0 0 1 291.546 489.492 Tm (packets) Tj 0 g 1 0 0 1 332.51 489.492 Tm (to) Tj 0 g 1 0 0 1 344.742 489.492 Tm (travel) Tj 0 g 1 0 0 1 374.695 489.492 Tm (between) Tj 0 g 1 0 0 1 419.333 489.492 Tm (eth0) Tj 0 g 1 0 0 1 443.797 489.492 Tm (and) Tj 0 g 1 0 0 1 465.203 489.492 Tm (eth1,) Tj 0 g 1 0 0 1 492.725 489.492 Tm (and) Tj 0 g 1 0 0 1 70.875 476.317 Tm (vice) Tj 0 g 1 0 0 1 93.491 476.317 Tm (versa.) Tj 0 g 1 0 0 1 126.502 476.317 Tm (In) Tj 0 g 1 0 0 1 138.734 476.317 Tm (our) Tj 0 g 1 0 0 1 157.687 476.317 Tm (example) Tj 0 g 1 0 0 1 202.314 476.317 Tm (configuration,) Tj 0 g 1 0 0 1 271.405 476.317 Tm (where) Tj 0 g 1 0 0 1 304.416 476.317 Tm (eth0) Tj 0 g 1 0 0 1 328.88 476.3 2000 17 Tm (is) Tj 0 g 1 0 0 1 339.88 476.317 Tm (connected) Tj 0 g 1 0 0 1 393.692 476.317 Tm (to) Tj 0 g 1 0 0 1 405.924 476.317 Tm (our) Tj 0 g 1 0 0 1 424.877 476.317 Tm (LAN,) Tj 0 g 1 0 0 1 452.388 476.317 Tm (and) Tj 0 g 1 0 0 1 473.794 476.317 Tm (eth1) Tj 0 g 1 0 0 1 498.258 476.317 Tm (is) Tj 0 g 1 0 0 1 70.875 463.142 Tm (connected) Tj 0 g 1 0 0 1 124.687 463.142 Tm (to) Tj 0 g 1 0 0 1 136.919 463.142 Tm (the) Tj 0 g 1 0 0 1 155.267 463.142 Tm (Internet,) Tj 0 g 1 0 0 1 198.684 463.142 Tm (enabling) Tj 0 g 1 0 0 1 243.322 463.142 Tm (IP) Tj 0 g 1 0 0 1 256.775 463.142 Tm (forwarding) Tj 0 g 1 0 0 1 311.181 463.142 Tm (is) Tj 0 g 1 0 0 1 322.181 463.142 Tm (a) Tj 0 g 1 0 0 1 331.355 463.142 Tm (necessary) Tj 0 g 1 0 0 1 384.54 463.142 Tm (step) Tj 0 g 1 0 0 1 408.388 463.142 Tm (in) Tj 0 g 1 0 0 1 420.004 463.142 Tm (allowing) Tj 0 g 1 0 0 1 462.794 463.142 Tm (our) Tj 0 g 1 0 0 1 481.747 463.142 Tm (LAN) Tj 0 g 1 0 0 1 506.2 463.142 Tm (to) Tj 0 g 1 0 0 1 70.875 449.967 Tm (connect) Tj 0 g 1 0 0 1 112.455 449.967 Tm (to) Tj 0 g 1 0 0 1 124.687 449.967 Tm (the) Tj 0 g 1 0 0 1 143.035 449.967 Tm (Internet) Tj 0 g 1 0 0 1 183.394 449.967 Tm (via) Tj 0 g 1 0 0 1 200.51 449.967 Tm (our) Tj 0 g 1 0 0 1 219.463 449.967 Tm (Linux) Tj 0 g 1 0 0 1 248.811 449.967 Tm (box.) Tj 0 g 1 0 0 1 272.659 449.967 Tm (To) Tj 0 g 1 0 0 1 288.554 449.967 Tm (enable) Tj 0 g 1 0 0 1 324.634 449.967 Tm (IP) Tj 0 g 1 0 0 1 338.087 449.967 Tm (forwarding,) Tj 0 g 1 0 0 1 395.551 449.967 Tm (use) Tj 0 g 1 0 0 1 416.341 449.967 Tm (this) Tj 0 g 1 0 0 1 436.515 449.967 Tm (line:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 423.771 Tm (echo) Tj 0 g 1 0 0 1 110.475 423.771 Tm (1) Tj 0 g 1 0 0 1 123.675 423.771 Tm (>) Tj 0 g 1 0 0 1 136.875 423.771 Tm (/proc/sys/net/ipv4/ip_forward) Tj ET q 0 G 70.875 391.898 m 524.475 391.898 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 362.474 Tm (Handling) Tj 0 g 1 0 0 1 146.907 362.474 Tm (rejection,) Tj 0 g 1 0 0 1 224.937 362.474 Tm (Part) Tj 0 g 1 0 0 1 262.953 362.474 Tm (1) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 338.85 Tm (So) Tj 0 g 1 0 0 1 87.386 338.85 Tm (far,) Tj 0 g 1 0 0 1 106.339 338.85 Tm (we've) Tj 0 g 1 0 0 1 137.172 338.85 Tm (been) Tj 0 g 1 0 0 1 164.694 338.85 Tm (dropping) Tj 0 g 1 0 0 1 210.553 338.85 Tm (all) Tj 0 g 1 0 0 1 224.611 338.85 Tm (unsolicited) Tj 0 g 1 0 0 1 279.633 338.85 Tm (traffic) Tj 0 g 1 0 0 1 309.586 338.85 Tm (coming) Tj 0 g 1 0 0 1 348.097 338.85 Tm (in) Tj 0 g 1 0 0 1 359.713 338.85 Tm (from) Tj 0 g 1 0 0 1 384.771 338.85 Tm (the) Tj 0 g 1 0 0 1 403.119 338.85 Tm (Internet.) Tj 0 g 1 0 0 1 446.536 338.85 Tm (While) Tj 0 g 1 0 0 1 477.094 338.85 Tm (this) Tj 0 g 1 0 0 1 497.268 338.85 Tm (is) Tj 0 g 1 0 0 1 508.268 338.85 Tm (an) Tj 0 g 1 0 0 1 70.875 325.675 Tm (effective) Tj 0 g 1 0 0 1 114.897 325.675 Tm (way) Tj 0 g 1 0 0 1 137.513 325.675 Tm (to) Tj 0 g 1 0 0 1 149.745 325.675 Tm (deter) Tj 0 g 1 0 0 1 177.872 325.675 Tm (unwanted) Tj 0 g 1 0 0 1 228.626 325.675 Tm (network) Tj 0 g 1 0 0 1 270.195 325.675 Tm (activity,) Tj 0 g 1 0 0 1 309.927 325.675 Tm (it) Tj 0 g 1 0 0 1 318.485 325.675 Tm (does) Tj 0 g 1 0 0 1 345.391 325.675 Tm (have) Tj 0 g 1 0 0 1 372.297 325.675 Tm (some) Tj 0 g 1 0 0 1 402.25 325.675 Tm (drawbacks.) Tj 0 g 1 0 0 1 460.935 325.675 Tm (The) Tj 0 g 1 0 0 1 482.946 325.675 Tm (biggest) Tj 0 g 1 0 0 1 70.875 312.5 Tm (problem) Tj 0 g 1 0 0 1 113.665 312.5 Tm (with) Tj 0 g 1 0 0 1 136.281 312.5 Tm (this) Tj 0 g 1 0 0 1 156.455 312.5 Tm (approach) Tj 0 g 1 0 0 1 205.372 312.5 Tm (is) Tj 0 g 1 0 0 1 216.372 312.5 Tm (that) Tj 0 g 1 0 0 1 237.778 312.5 Tm (it's) Tj 0 g 1 0 0 1 253.937 312.5 Tm (easy) Tj 0 g 1 0 0 1 280.227 312.5 Tm (for) Tj 0 g 1 0 0 1 296.122 312.5 Tm (an) Tj 0 g 1 0 0 1 311.412 312.5 Tm (intruder) Tj 0 g 1 0 0 1 351.76 312.5 Tm (to) Tj 0 g 1 0 0 1 363.992 312.5 Tm (detect) Tj 0 g 1 0 0 1 397.014 312.5 Tm (that) Tj 0 g 1 0 0 1 418.42 312.5 Tm (we're) Tj 0 g 1 0 0 1 447.416 312.5 Tm (running) Tj 0 g 1 0 0 1 487.159 312.5 Tm (a) Tj 0 g 1 0 0 1 70.875 299.325 Tm (firewall,) Tj 0 g 1 0 0 1 111.212 299.325 Tm (since) Tj 0 g 1 0 0 1 139.944 299.325 Tm (our) Tj 0 g 1 0 0 1 158.897 299.325 Tm (machine) Tj 0 g 1 0 0 1 203.524 299.325 Tm (isn't) Tj 0 g 1 0 0 1 225.799 299.325 Tm (replying) Tj 0 g 1 0 0 1 267.368 299.325 Tm (with) Tj 0 g 1 0 0 1 289.984 299.325 Tm (the) Tj 0 g 1 0 0 1 308.332 299.325 Tm (standard) Tj 0 g 1 0 0 1 354.191 299.325 Tm (TCP) Tj 0 g 1 0 0 1 379.249 299.325 Tm (reset) Tj 0 g 1 0 0 1 406.76 299.325 Tm (and) Tj 0 g 1 0 0 1 428.166 299.325 Tm (ICMP) Tj 0 g 1 0 0 1 70.875 286.15 Tm (port-unreachable) Tj 0 g 1 0 0 1 159.843 286.15 Tm (responses) Tj 0 g 1 0 0 1 213.644 286.15 Tm (--) Tj 0 g 1 0 0 1 229.55 286.15 Tm (the) Tj 0 g 1 0 0 1 247.898 286.15 Tm (responses) Tj 0 g 1 0 0 1 301.699 286.15 Tm (that) Tj 0 g 1 0 0 1 323.105 286.15 Tm (a) Tj 0 g 1 0 0 1 332.279 286.15 Tm (normal) Tj 0 g 1 0 0 1 368.953 286.15 Tm (machine) Tj 0 g 1 0 0 1 413.58 286.15 Tm (would) Tj 0 g 1 0 0 1 445.37 286.15 Tm (send) Tj 0 g 1 0 0 1 472.276 286.15 Tm (back) Tj 0 g 1 0 0 1 498.566 286.15 Tm (to) Tj 0 g 1 0 0 1 70.875 272.975 Tm (indicate) Tj 0 g 1 0 0 1 111.839 272.975 Tm (a) Tj 0 g 1 0 0 1 121.013 272.975 Tm (failed) Tj 0 g 1 0 0 1 150.361 272.975 Tm (connection) Tj 0 g 1 0 0 1 206.615 272.975 Tm (attempt) Tj 0 g 1 0 0 1 246.358 272.975 Tm (to) Tj 0 g 1 0 0 1 258.59 272.975 Tm (a) Tj 0 g 1 0 0 1 267.764 272.975 Tm (non-existent) Tj 0 g 1 0 0 1 333.5 272.975 Tm (service.) Tj ET q 0 G 70.875 252.198 m 524.475 252.198 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 222.774 Tm (Handling) Tj 0 g 1 0 0 1 146.907 222.774 Tm (rejection,) Tj 0 g 1 0 0 1 224.937 222.774 Tm (Part) Tj 0 g 1 0 0 1 262.953 222.774 Tm (2) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 199.15 Tm (Rather) Tj 0 g 1 0 0 1 106.944 199.15 Tm (than) Tj 0 g 1 0 0 1 131.408 199.15 Tm (let) Tj 0 g 1 0 0 1 146.082 199.15 Tm (po) Tj 0 g 1 0 0 1 158.314 199.15 Tm (tential) Tj 0 g 1 0 0 1 190.72 199.15 Tm (intruders) Tj 0 g 1 0 0 1 236.568 199.15 Tm (know) Tj 0 g 1 0 0 1 265.3 199.15 Tm (that) Tj 0 g 1 0 0 1 286.706 199.15 Tm (we're) Tj 0 g 1 0 0 1 315.702 199.15 Tm (running) Tj 0 g 1 0 0 1 355.445 199.15 Tm (a) Tj 0 g 1 0 0 1 364.619 199.15 Tm (firewall) Tj 0 g 1 0 0 1 401.898 199.15 Tm (\(and) Tj 0 g 1 0 0 1 426.967 199.15 Tm (thus) Tj 0 g 1 0 0 1 450.815 199.15 Tm (tip) Tj 0 g 1 0 0 1 465.489 199.15 Tm (them) Tj 0 g 1 0 0 1 493.0 199.15 Tm (off) Tj 0 g 1 0 0 1 508.29 199.15 Tm (to) Tj 0 g 1 0 0 1 70.875 185.975 Tm (the) Tj 0 g 1 0 0 1 89.223 185.975 Tm (fact) Tj 0 g 1 0 0 1 110.013 185.975 Tm (that) Tj 0 g 1 0 0 1 131.419 185.975 Tm (we) Tj 0 g 1 0 0 1 148.535 185.975 Tm (may) Tj 0 g 1 0 0 1 172.372 185.975 Tm (be) Tj 0 g 1 0 0 1 187.662 185.975 Tm (running) Tj 0 g 1 0 0 1 227.405 185.975 Tm (some) Tj 0 g 1 0 0 1 257.358 185.975 Tm (valuable) Tj 0 g 1 0 0 1 301.38 185.975 Tm (services) Tj 0 g 1 0 0 1 344.775 185.975 Tm (that) Tj 0 g 1 0 0 1 366.181 185.975 Tm (they) Tj 0 g 1 0 0 1 390.029 185.975 Tm (can't) Tj 0 g 1 0 0 1 415.978 185.975 Tm (get) Tj 0 g 1 0 0 1 434.326 185.975 Tm (to\),) Tj 0 g 1 0 0 1 453.279 185.975 Tm (it) Tj 0 g 1 0 0 1 461.837 185.975 Tm (would) Tj 0 g 1 0 0 1 493.627 185.975 Tm (be) Tj 0 g 1 0 0 1 508.917 185.975 Tm (to) Tj 0 g 1 0 0 1 70.875 172.8 Tm (our) Tj 0 g 1 0 0 1 89.828 172.8 Tm (advantage) Tj 0 g 1 0 0 1 144.256 172.8 Tm (to) Tj 0 g 1 0 0 1 156.488 172.8 Tm (make) Tj 0 g 1 0 0 1 186.441 172.8 Tm (it) Tj 0 g 1 0 0 1 194.999 172.8 Tm (appear) Tj 0 g 1 0 0 1 232.3 172.8 Tm (as) Tj 0 g 1 0 0 1 246.974 172.8 Tm (if) Tj 0 g 1 0 0 1 255.532 172.8 Tm (we) Tj 0 g 1 0 0 1 272.648 172.8 Tm (aren't) Tj 0 g 1 0 0 1 302.876 172.8 Tm (running) Tj 0 g 1 0 0 1 342.619 172.8 Tm (any) Tj 0 g 1 0 0 1 363.409 172.8 Tm (services) Tj 0 g 1 0 0 1 406.804 172.8 Tm (at) Tj 0 g 1 0 0 1 419.036 172.8 Tm (all.) Tj 0 g 1 0 0 1 436.152 172.8 Tm (By) Tj 0 g 1 0 0 1 452.047 172.8 Tm (adding) Tj 0 g 1 0 0 1 488.127 172.8 Tm (these) Tj 0 g 1 0 0 1 70.875 159.625 Tm (two) Tj 0 g 1 0 0 1 91.049 159.625 Tm (rules) Tj 0 g 1 0 0 1 117.944 159.625 Tm (to) Tj 0 g 1 0 0 1 130.176 159.625 Tm (the) Tj 0 g 1 0 0 1 148.524 159.625 Tm (end) Tj 0 g 1 0 0 1 169.93 159.625 Tm (of) Tj 0 g 1 0 0 1 182.162 159.625 Tm (our) Tj 0 g 1 0 0 1 201.115 159.625 2000 Tm (INPUT) Tj 0 g 1 0 0 1 237.173 159.625 Tm (chain,) Tj 0 g 1 0 0 1 269.579 159.625 Tm (we) Tj 0 g 1 0 0 1 286.695 159.625 Tm (can) Tj 0 g 1 0 0 1 307.485 159.625 Tm (successfully) Tj 0 g 1 0 0 1 369.833 159.625 Tm (accomplish) Tj 0 g 1 0 0 1 427.902 159.625 Tm (this) Tj 0 g 1 0 0 1 448.076 159.625 Tm (task:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 133.429 Tm (iptables) Tj 0 g 1 0 0 1 136.875 133.429 Tm (-A) Tj 0 g 1 0 0 1 156.675 133.429 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 133.429 Tm (-p) Tj 0 g 1 0 0 1 216.075 133.429 Tm (tcp) Tj 0 g 1 0 0 1 242.475 133.429 Tm (-i) Tj 0 g 1 0 0 1 262.275 133.429 Tm (eth1) Tj 0 g 1 0 0 1 295.275 133.429 Tm (-j) Tj 0 g 1 0 0 1 315.075 133.429 Tm (REJECT) Tj 0 g 1 0 0 1 361.275 133.429 Tm (--reject-with) Tj 0 g 1 0 0 1 453.675 133.429 Tm (tcp-reset) Tj 0 g 1 0 0 1 77.475 121.783 Tm (iptables) Tj 0 g 1 0 0 1 136.875 121.783 Tm (-A) Tj 0 g 1 0 0 1 156.675 121.783 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 121.783 Tm (-p) Tj 0 g 1 0 0 1 216.075 121.783 Tm (udp) Tj 0 g 1 0 0 1 242.475 121.783 Tm (-i) Tj 0 g 1 0 0 1 262.275 121.783 Tm (eth1) Tj 0 g 1 0 0 1 295.275 121.783 Tm (-j) Tj 0 g 1 0 0 1 315.075 121.783 Tm (REJECT) Tj 0 g 1 0 0 1 361.275 121.783 Tm (--reject-with) Tj 0 g 1 0 0 1 453.675 121.783 Tm (icmp-port-unreachable) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 83.512 Tm (Our) Tj 0 g 1 0 0 1 92.27 83.512 Tm (first) Tj 0 g 1 0 0 1 113.049 83.512 Tm (rule) Tj 0 g 1 0 0 1 134.444 83.512 Tm (takes) Tj 0 g 1 0 0 1 163.792 83.512 Tm (care) Tj 0 g 1 0 0 1 188.245 83.512 Tm (of) Tj 0 g 1 0 0 1 200.477 83.512 Tm (correctly) Tj 0 g 1 0 0 1 245.093 83.512 Tm (zapping) Tj 0 g 1 0 0 1 286.673 83.512 Tm (TCP) Tj 0 g 1 0 0 1 311.731 83.512 Tm (connections,) Tj 0 g 1 0 0 1 376.543 83.512 Tm (while) Tj 0 g 1 0 0 1 404.659 83.512 Tm (the) Tj 0 g 1 0 0 1 423.007 83.512 Tm (second) Tj 0 g 1 0 0 1 461.529 83.512 Tm (handles) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (12) Tj ET endstream endobj 93 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 92 0 R >> endobj 94 0 obj << /Length 17360 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (UDP.) Tj 0 g 1 0 0 1 100.212 761.722 Tm (With) Tj 0 g 1 0 0 1 125.27 761.722 Tm (these) Tj 0 g 1 0 0 1 155.234 761.722 Tm (two) Tj 0 g 1 0 0 1 175.408 761.722 Tm (rules) Tj 0 g 1 0 0 1 202.303 761.722 Tm (in) Tj 0 g 1 0 0 1 213.919 761.722 Tm (place,) Tj 0 g 1 0 0 1 246.325 761.722 Tm (it) Tj 0 g 1 0 0 1 254.883 761.722 Tm (becomes) Tj 0 g 1 0 0 1 302.568 761.722 Tm (very) Tj 0 g 1 0 0 1 326.405 761.722 Tm (difficult) Tj 0 g 1 0 0 1 363.695 761.722 Tm (for) Tj 0 g 1 0 0 1 379.59 761.722 Tm (an) Tj 0 g 1 0 0 1 394.88 761.722 Tm (intruder) Tj 0 g 1 0 0 1 435.228 761.722 Tm (to) Tj 0 g 1 0 0 1 447.46 761.722 Tm (detect) Tj 0 g 1 0 0 1 480.482 761.722 Tm (that) Tj 0 g 1 0 0 1 70.875 748.547 Tm (we're) Tj 0 g 1 0 0 1 99.871 748.547 Tm (actually) Tj 0 g 1 0 0 1 140.219 748.547 Tm (running) Tj 0 g 1 0 0 1 179.962 748.547 Tm (a) Tj 0 g 1 0 0 1 189.136 748.547 Tm (firewall;) Tj 0 g 1 0 0 1 229.473 748.547 Tm (hopefully,) Tj 0 g 1 0 0 1 279.611 748.547 Tm (this) Tj 0 g 1 0 0 1 299.785 748.547 Tm (will) Tj 0 g 1 0 0 1 318.111 748.547 Tm (cause) Tj 0 g 1 0 0 1 350.517 748.547 Tm (the) Tj 0 g 1 0 0 1 368.865 748.547 Tm (intruder) Tj 0 g 1 0 0 1 409.213 748.547 Tm (to) Tj 0 g 1 0 0 1 421.445 748.547 Tm (leave) Tj 0 g 1 0 0 1 450.793 748.547 Tm (our) Tj 0 g 1 0 0 1 469.746 748.547 Tm (machine) Tj 0 g 1 0 0 1 70.875 735.372 Tm (and) Tj 0 g 1 0 0 1 92.281 735.372 Tm (search) Tj 0 g 1 0 0 1 128.35 735.372 Tm (for) Tj 0 g 1 0 0 1 144.245 735.372 Tm (other) Tj 0 g 1 0 0 1 172.372 735.372 Tm (targets) Tj 0 g 1 0 0 1 209.057 735.372 Tm (with) Tj 0 g 1 0 0 1 231.673 735.372 Tm (more) Tj 0 g 1 0 0 1 259.789 735.372 Tm (potential) Tj 0 g 1 0 0 1 304.427 735.372 Tm (for) Tj 0 g 1 0 0 1 320.322 735.372 Tm (abuse.) Tj ET q 0 G 70.875 714.595 m 524.475 714.595 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 685.171 Tm (Handling) Tj 0 g 1 0 0 1 146.907 685.171 Tm (rejection,) Tj 0 g 1 0 0 1 224.937 685.171 Tm (Part) Tj 0 g 1 0 0 1 262.953 685.171 Tm (3) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 661.547 Tm (In) Tj 0 g 1 0 0 1 83.107 661.547 Tm (addition) Tj 0 g 1 0 0 1 124.687 661.547 Tm (to) Tj 0 g 1 0 0 1 136.919 661.547 Tm (making) Tj 0 g 1 0 0 1 175.43 661.547 Tm (our) Tj 0 g 1 0 0 1 194.383 661.547 Tm (firewall) Tj 0 g 1 0 0 1 231.662 661.547 Tm (more) Tj 0 g 1 0 0 1 259.778 661.547 Tm ("stealthy",) Tj 0 g 1 0 0 1 311.61 661.547 Tm (these) Tj 0 g 1 0 0 1 341.574 661.547 Tm (rules) Tj 0 g 1 0 0 1 368.469 661.547 Tm (also) Tj 0 g 1 0 0 1 391.701 661.547 Tm (eliminate) Tj 0 g 1 0 0 1 438.77 661.547 Tm (the) Tj 0 g 1 0 0 1 457.118 661.547 Tm (delay) Tj 0 g 1 0 0 1 70.875 648.372 Tm (involved) Tj 0 g 1 0 0 1 114.281 648.372 Tm (in) Tj 0 g 1 0 0 1 125.897 648.372 Tm (connecting) Tj 0 g 1 0 0 1 182.151 648.372 Tm (to) Tj 0 g 1 0 0 1 194.383 648.372 Tm (certain) Tj 0 g 1 0 0 1 230.452 648.372 Tm (ftp) Tj 0 g 1 0 0 1 245.742 648.372 Tm (and) Tj 0 g 1 0 0 1 267.148 648.372 Tm (irc) Tj 0 g 1 0 0 1 281.811 648.372 Tm (servers.) Tj 0 g 1 0 0 1 323.985 648.372 Tm (This) Tj 0 g 1 0 0 1 347.822 648.372 Tm (delay) Tj 0 g 1 0 0 1 377.17 648.372 Tm (is) Tj 0 g 1 0 0 1 388.17 648.372 Tm (caused) Tj 0 g 1 0 0 1 426.692 648.372 Tm (by) Tj 0 g 1 0 0 1 441.366 648.372 Tm (the) Tj 0 g 1 0 0 1 459.714 648.372 Tm (server) Tj 0 g 1 0 0 1 70.875 635.197 Tm (performing) Tj 0 g 1 0 0 1 126.502 635.197 Tm (an) Tj 0 g 1 0 0 1 141.792 635.197 Tm (ident) Tj 0 g 1 0 0 1 168.698 635.197 Tm (lookup) Tj 0 g 1 0 0 1 204.162 635.197 Tm (to) Tj 0 g 1 0 0 1 216.394 635.197 Tm (your) Tj 0 g 1 0 0 1 240.847 635.197 Tm (machine) Tj 0 g 1 0 0 1 285.474 635.197 Tm (\(connecting) Tj 0 g 1 0 0 1 345.391 635.197 Tm (to) Tj 0 g 1 0 0 1 357.623 635.197 Tm (port) Tj 0 g 1 0 0 1 379.634 635.197 Tm (113\)) Tj 0 g 1 0 0 1 404.703 635.197 Tm (and) Tj 0 g 1 0 0 1 426.109 635.197 Tm (eventually) Tj 0 g 1 0 0 1 478.689 635.197 Tm (\(after) Tj 0 g 1 0 0 1 70.875 622.022 Tm (about) Tj 0 g 1 0 0 1 101.455 622.022 Tm (15) Tj 0 g 1 0 0 1 116.745 622.022 Tm (seconds\)) Tj 0 g 1 0 0 1 164.43 622.022 Tm (timing) Tj 0 g 1 0 0 1 196.825 622.022 Tm (out.) Tj 0 g 1 0 0 1 218.231 622.022 Tm (Now,) Tj 0 g 1 0 0 1 246.347 622.022 Tm (our) Tj 0 g 1 0 0 1 265.3 622.022 Tm (firewall) Tj 0 g 1 0 0 1 302.579 622.022 Tm (will) Tj 0 g 1 0 0 1 320.905 622.022 Tm (return) Tj 0 g 1 0 0 1 352.695 622.022 Tm (a) Tj 0 g 1 0 0 1 361.869 622.022 Tm (TCP) Tj 0 g 1 0 0 1 386.927 622.022 Tm (reset) Tj 0 g 1 0 0 1 414.438 622.022 Tm (and) Tj 0 g 1 0 0 1 435.844 622.022 Tm (the) Tj 0 g 1 0 0 1 454.192 622.022 Tm (ident) Tj 0 g 1 0 0 1 481.098 622.022 Tm (lookup) Tj 0 g 1 0 0 1 70.875 608.847 Tm (will) Tj 0 g 1 0 0 1 89.201 608.847 Tm (fail) Tj 0 g 1 0 0 1 106.317 608.847 Tm (immediately) Tj 0 g 1 0 0 1 168.049 608.847 Tm (instead) Tj 0 g 1 0 0 1 206.571 608.847 Tm (of) Tj 0 g 1 0 0 1 218.803 608.847 Tm (retrying) Tj 0 g 1 0 0 1 258.535 608.847 Tm (for) Tj 0 g 1 0 0 1 274.43 608.847 Tm (15) Tj 0 g 1 0 0 1 289.72 608.847 Tm (seconds) Tj 0 g 1 0 0 1 333.742 608.847 Tm (\(while) Tj 0 g 1 0 0 1 365.521 608.847 Tm (you're) Tj 0 g 1 0 0 1 398.191 608.847 Tm (patiently) Tj 0 g 1 0 0 1 442.213 608.847 Tm (waiting) Tj 0 g 1 0 0 1 479.503 608.847 Tm (for) Tj 0 g 1 0 0 1 495.398 608.847 Tm (a) Tj 0 g 1 0 0 1 70.875 595.672 Tm (response) Tj 0 g 1 0 0 1 119.176 595.672 Tm (from) Tj 0 g 1 0 0 1 144.234 595.672 Tm (the) Tj 0 g 1 0 0 1 162.582 595.672 Tm (server\).) Tj ET q 0 G 70.875 574.895 m 524.475 574.895 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 545.471 Tm (Sp 2000 oof) Tj 0 g 1 0 0 1 122.913 545.471 Tm (protection) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 521.847 Tm (In) Tj 0 g 1 0 0 1 83.107 521.847 Tm (many) Tj 0 g 1 0 0 1 113.06 521.847 Tm (distributions,) Tj 0 g 1 0 0 1 177.861 521.847 Tm (when) Tj 0 g 1 0 0 1 207.209 521.847 Tm (the) Tj 0 g 1 0 0 1 225.557 521.847 Tm (network) Tj 0 g 1 0 0 1 267.126 521.847 Tm (interface\(s\)) Tj 0 g 1 0 0 1 325.195 521.847 Tm (are) Tj 0 g 1 0 0 1 344.148 521.847 Tm (brought) Tj 0 g 1 0 0 1 384.507 521.847 Tm (up,) Tj 0 g 1 0 0 1 402.855 521.847 Tm (several) Tj 0 g 1 0 0 1 441.366 521.847 Tm (old) Tj 0 g 1 0 0 1 459.098 521.847 Tm (ipchains) Tj 0 g 1 0 0 1 70.875 508.672 Tm (rules) Tj 0 g 1 0 0 1 97.77 508.672 Tm (are) Tj 0 g 1 0 0 1 116.723 508.672 Tm (also) Tj 0 g 1 0 0 1 139.955 508.672 Tm (added) Tj 0 g 1 0 0 1 173.593 508.672 Tm (to) Tj 0 g 1 0 0 1 185.825 508.672 Tm (the) Tj 0 g 1 0 0 1 204.173 508.672 Tm (system.) Tj 0 g 1 0 0 1 245.126 508.672 Tm (These) Tj 0 g 1 0 0 1 278.753 508.672 Tm (special) Tj 0 g 1 0 0 1 316.043 508.672 Tm (rules) Tj 0 g 1 0 0 1 342.938 508.672 Tm (were) Tj 0 g 1 0 0 1 369.833 508.672 Tm (added) Tj 0 g 1 0 0 1 403.471 508.672 Tm (by) Tj 0 g 1 0 0 1 418.145 508.672 Tm (the) Tj 0 g 1 0 0 1 436.493 508.672 Tm (creators) Tj 0 g 1 0 0 1 479.283 508.672 Tm (of) Tj 0 g 1 0 0 1 491.515 508.672 Tm (the) Tj 0 g 1 0 0 1 70.875 495.497 Tm (distribution) Tj 0 g 1 0 0 1 127.118 495.497 Tm (to) Tj 0 g 1 0 0 1 139.35 495.497 Tm (deal) Tj 0 g 1 0 0 1 163.198 495.497 Tm (with) Tj 0 g 1 0 0 1 185.814 495.497 Tm (a) Tj 0 g 1 0 0 1 194.988 495.497 Tm (problem) Tj 0 g 1 0 0 1 237.778 495.497 Tm (called) Tj 0 g 1 0 0 1 269.568 495.497 Tm (spoofing,) Tj 0 g 1 0 0 1 317.264 495.497 Tm (in) Tj 0 g 1 0 0 1 328.88 495.497 Tm (which) Tj 0 g 1 0 0 1 360.054 495.497 Tm (the) Tj 0 g 1 0 0 1 378.402 495.497 Tm (source) Tj 0 g 1 0 0 1 414.471 495.497 Tm (address) Tj 0 g 1 0 0 1 456.656 495.497 Tm (of) Tj 0 g 1 0 0 1 468.888 495.497 Tm (packets) Tj 0 g 1 0 0 1 70.875 482.322 Tm (have) Tj 0 g 1 0 0 1 97.781 482.322 Tm (been) Tj 0 g 1 0 0 1 125.303 482.322 Tm (tweaked) Tj 0 g 1 0 0 1 169.325 482.322 Tm (so) Tj 0 g 1 0 0 1 183.999 482.322 Tm (that) Tj 0 g 1 0 0 1 205.405 482.322 Tm (they) Tj 0 g 1 0 0 1 229.253 482.322 Tm (contains) Tj 0 g 1 0 0 1 273.275 482.322 Tm (an) Tj 0 g 1 0 0 1 288.565 482.322 Tm (invalid) Tj 0 g 1 0 0 1 322.797 482.322 Tm (value) Tj 0 g 1 0 0 1 352.145 482.322 Tm (\(something) Tj 0 g 1 0 0 1 409.609 482.322 Tm (that) Tj 0 g 1 0 0 1 431.015 482.322 Tm (script) Tj 0 g 1 0 0 1 460.352 482.322 Tm (kiddies) Tj 0 g 1 0 0 1 497.642 482.322 Tm (do\).) Tj 0 g 1 0 0 1 70.875 469.147 Tm (While) Tj 0 g 1 0 0 1 101.433 469.147 Tm (we) Tj 0 g 1 0 0 1 118.549 469.147 Tm (can) Tj 0 g 1 0 0 1 139.339 469.147 Tm (create) Tj 0 g 1 0 0 1 172.966 469.147 Tm (similar) Tj 0 g 1 0 0 1 207.792 469.147 Tm (iptables) Tj 0 g 1 0 0 1 248.756 469.147 Tm (rules) Tj 0 g 1 0 0 1 275.651 469.147 Tm (that) Tj 0 g 1 0 0 1 297.057 469.147 Tm (will) Tj 0 g 1 0 0 1 315.383 469.147 Tm (also) Tj 0 g 1 0 0 1 338.615 469.147 Tm (block) Tj 0 g 1 0 0 1 367.347 469.147 Tm (spoofed) Tj 0 g 1 0 0 1 409.543 469.147 Tm (packets,) Tj 0 g 1 0 0 1 453.565 469.147 Tm (there's) Tj 0 g 1 0 0 1 489.293 469.147 Tm (an) Tj 0 g 1 0 0 1 70.875 455.972 Tm (easier) Tj 0 g 1 0 0 1 103.886 455.972 Tm (way.) Tj 0 g 1 0 0 1 129.56 455.972 Tm (These) Tj 0 g 1 0 0 1 163.187 455.972 Tm (days,) Tj 0 g 1 0 0 1 192.535 455.972 Tm (the) Tj 0 g 1 0 0 1 210.883 455.972 Tm (kernel) Tj 0 g 1 0 0 1 243.894 455.972 Tm (has) Tj 0 g 1 0 0 1 264.684 455.972 Tm (the) Tj 0 g 1 0 0 1 283.032 455.972 Tm (built-in) Tj 0 g 1 0 0 1 321.246 455.972 Tm (ability) Tj 0 g 1 0 0 1 352.42 455.972 Tm (to) Tj 0 g 1 0 0 1 364.652 455.972 Tm (dropped) Tj 0 g 1 0 0 1 408.069 455.972 Tm (spoofed) Tj 0 g 1 0 0 1 450.265 455.972 Tm (packets;) Tj 0 g 1 0 0 1 494.287 455.972 Tm (all) Tj 0 g 1 0 0 1 508.345 455.972 Tm (we) Tj 0 g 1 0 0 1 70.875 442.797 Tm (need) Tj 0 g 1 0 0 1 98.397 442.797 Tm (to) Tj 0 g 1 0 0 1 110.629 442.797 Tm (do) Tj 0 g 1 0 0 1 125.919 442.797 Tm (is) Tj 0 g 1 0 0 1 136.919 442.797 Tm (enable) Tj 0 g 1 0 0 1 172.999 442.797 Tm (it) Tj 0 g 1 0 0 1 181.557 442.797 Tm (via) Tj 0 g 1 0 0 1 198.673 442.797 Tm (a) Tj 0 g 1 0 0 1 207.847 442.797 Tm (simple) Tj 0 g 1 0 0 1 242.684 442.797 Tm (/proc) Tj 0 g 1 0 0 1 270.195 442.797 Tm (interface.) Tj 0 g 1 0 0 1 318.496 442.797 Tm (Here's) Tj 0 g 1 0 0 1 352.992 442.797 Tm (how.) Tj ET q 0 G 70.875 422.02 m 524.475 422.02 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 392.596 Tm (Spoof) Tj 0 g 1 0 0 1 122.913 392.596 Tm (protection,) Tj 0 g 1 0 0 1 211.959 392.596 Tm (continued) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 369.951 Tm (for) Tj 0 g 1 0 0 1 103.875 369.951 Tm (x) Tj 0 g 1 0 0 1 117.075 369.951 Tm (in) Tj 0 g 1 0 0 1 136.875 369.951 Tm (lo) Tj 0 g 1 0 0 1 156.675 369.951 Tm (eth0) Tj 0 g 1 0 0 1 189.675 369.951 Tm (eth1) Tj 0 g 1 0 0 1 77.475 358.305 Tm (do) Tj 0 g 1 0 0 1 136.875 346.659 Tm (echo) Tj 0 g 1 0 0 1 169.875 346.659 Tm (1) Tj 0 g 1 0 0 1 183.075 346.659 Tm (>) Tj 0 g 1 0 0 1 196.275 346.659 Tm (/proc/sys/net/ipv4/conf/${x}/rp_filter) Tj 0 g 1 0 0 1 77.475 335.013 Tm (done) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 296.742 Tm (This) Tj 0 g 1 0 0 1 94.712 296.742 Tm (shell) Tj 0 g 1 0 0 1 120.386 296.742 Tm (script) Tj 0 g 1 0 0 1 149.723 296.742 Tm (will) Tj 0 g 1 0 0 1 168.049 296.742 Tm (tell) Tj 0 g 1 0 0 1 185.165 296.742 Tm (the) Tj 0 g 1 0 0 1 203.513 296.742 Tm (kernel) Tj 0 g 1 0 0 1 236.524 296.742 Tm (to) Tj 0 g 1 0 0 1 248.756 296.742 Tm (drop) Tj 0 g 1 0 0 1 273.825 296.742 Tm (any) Tj 0 g 1 0 0 1 294.615 296.742 Tm (spoofed) Tj 0 g 1 0 0 1 336.811 296.742 Tm (packets) Tj 0 g 1 0 0 1 377.775 296.742 Tm (on) Tj 0 g 1 0 0 1 393.065 296.742 Tm (interfaces) Tj 0 g 1 0 0 1 443.808 296.742 Tm (lo,) Tj 0 g 1 0 0 1 458.482 296.742 Tm (eth0,) Tj 0 g 1 0 0 1 486.004 296.742 Tm (and) Tj 0 g 1 0 0 1 70.875 283.567 Tm (eth1.) Tj 0 g 1 0 0 1 98.397 283.567 Tm (You) Tj 0 g 1 0 0 1 121.024 283.567 Tm (can) Tj 0 g 1 0 0 1 141.814 283.567 Tm (either) Tj 0 g 1 0 0 1 172.383 283.567 Tm (add) Tj 0 g 1 0 0 1 193.789 283.567 Tm (these) Tj 0 g 1 0 0 1 223.753 283.567 Tm (lines) Tj 0 g 1 0 0 1 249.427 283.567 Tm (to) Tj 0 g 1 0 0 1 261.659 283.567 Tm (your) Tj 0 g 1 0 0 1 286.112 283.567 Tm (firewall) Tj 0 g 1 0 0 1 323.391 283.567 Tm (script,) Tj 0 g 1 0 0 1 355.786 283.567 Tm (or) Tj 0 g 1 0 0 1 368.623 283.567 Tm (add) Tj 0 g 1 0 0 1 390.029 283.567 Tm (them) Tj 0 g 1 0 0 1 417.54 283.567 Tm (to) Tj 0 g 1 0 0 1 429.772 283.567 Tm (the) Tj 0 g 1 0 0 1 448.12 283.567 Tm (script) Tj 0 g 1 0 0 1 477.457 283.567 Tm (that) Tj 0 g 1 0 0 1 70.875 270.392 Tm (brings) Tj 0 g 1 0 0 1 103.886 270.392 Tm (up) Tj 0 g 1 0 0 1 119.176 270.392 Tm (your) Tj 0 g 1 0 0 1 143.629 270.392 Tm (lo,) Tj 0 g 1 0 0 1 158.303 270.392 Tm (eth0,) Tj 0 g 1 0 0 1 185.825 270.392 Tm (and) Tj 0 g 1 0 0 1 207.231 270.392 Tm (eth1) Tj 0 g 1 0 0 1 231.695 270.392 Tm (interfaces.) Tj ET q 0 G 70.875 249.615 m 524.475 249.615 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 220.191 Tm (Masquerading) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 196.567 Tm (NAT) Tj 0 g 1 0 0 1 95.933 196.567 Tm (\(network) Tj 0 g 1 0 0 1 141.165 196.567 Tm (address) Tj 0 g 1 0 0 1 183.35 196.567 Tm (translation\)) Tj 0 g 1 0 0 1 240.814 196.567 Tm (and) Tj 0 g 1 0 0 1 262.22 196.567 Tm (IP) Tj 0 g 1 0 0 1 275.673 196.567 Tm (masquerading,) Tj 0 g 1 0 0 1 351.485 196.567 Tm (while) Tj 0 g 1 0 0 1 379.601 196.567 Tm (not) Tj 0 g 1 0 0 1 397.949 196.567 Tm (directly) Tj 0 g 1 0 0 1 435.844 196.567 Tm (related) Tj 0 g 1 0 0 1 472.529 196.567 Tm (to) Tj 0 g 1 0 0 1 70.875 183.392 Tm (firewalls,) Tj 0 g 1 0 0 1 116.712 183.392 Tm (are) Tj 0 g 1 0 0 1 135.665 183.392 Tm (often) Tj 0 g 1 0 0 1 163.187 183.392 Tm (used) Tj 0 g 1 0 0 1 190.093 183.392 Tm (in) Tj 0 g 1 0 0 1 201.709 183.392 Tm (conjunction) Tj 0 g 1 0 0 1 260.405 183.392 Tm (with) Tj 0 g 1 0 0 1 283.021 183.392 Tm (them.) Tj 0 g 1 0 0 1 313.59 183.392 Tm (We're) Tj 0 g 1 0 0 1 345.028 183.392 Tm (going) Tj 0 g 1 0 0 1 374.992 183.392 Tm (to) Tj 0 g 1 0 0 1 387.224 183.392 Tm (look) Tj 0 g 1 0 0 1 410.456 183.392 Tm (at) Tj 0 g 1 0 0 1 422.688 183.392 Tm (two) Tj 0 g 1 0 0 1 442.862 183.392 Tm (common) Tj 0 g 1 0 0 1 2000 70.875 170.217 Tm (NAT/masquerading) Tj 0 g 1 0 0 1 168.687 170.217 Tm (configurations) Tj 0 g 1 0 0 1 240.22 170.217 Tm (that) Tj 0 g 1 0 0 1 261.626 170.217 Tm (you) Tj 0 g 1 0 0 1 282.416 170.217 Tm (may) Tj 0 g 1 0 0 1 306.253 170.217 Tm (need) Tj 0 g 1 0 0 1 333.775 170.217 Tm (to) Tj 0 g 1 0 0 1 346.007 170.217 Tm (use.) Tj 0 g 1 0 0 1 369.855 170.217 Tm (This) Tj 0 g 1 0 0 1 393.692 170.217 Tm (first) Tj 0 g 1 0 0 1 414.471 170.217 Tm (rule) Tj 0 g 1 0 0 1 435.866 170.217 Tm (would) Tj 0 g 1 0 0 1 467.656 170.217 Tm (take) Tj 0 g 1 0 0 1 491.504 170.217 Tm (care) Tj 0 g 1 0 0 1 70.875 157.042 Tm (of) Tj 0 g 1 0 0 1 83.107 157.042 Tm (situations) Tj 0 g 1 0 0 1 132.629 157.042 Tm (where) Tj 0 g 1 0 0 1 165.64 157.042 Tm (you) Tj 0 g 1 0 0 1 186.43 157.042 Tm (have) Tj 0 g 1 0 0 1 213.336 157.042 Tm (a) Tj 0 g 1 0 0 1 222.51 157.042 Tm (dialup) Tj 0 g 1 0 0 1 254.916 157.042 Tm (link) Tj 0 g 1 0 0 1 274.474 157.042 Tm (to) Tj 0 g 1 0 0 1 286.706 157.042 Tm (the) Tj 0 g 1 0 0 1 305.054 157.042 Tm (Internet) Tj 0 g 1 0 0 1 345.413 157.042 Tm (\(ppp0\)) Tj 0 g 1 0 0 1 380.261 157.042 Tm (that) Tj 0 g 1 0 0 1 401.667 157.042 Tm (uses) Tj 0 g 1 0 0 1 427.957 157.042 Tm (a) Tj 0 g 1 0 0 1 437.131 157.042 Tm (dynamic) Tj 0 g 1 0 0 1 481.142 157.042 Tm (IP:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 130.846 Tm (iptables) Tj 0 g 1 0 0 1 136.875 130.846 Tm (-t) Tj 0 g 1 0 0 1 156.675 130.846 Tm (nat) Tj 0 g 1 0 0 1 183.075 130.846 Tm (-A) Tj 0 g 1 0 0 1 202.875 130.846 Tm (POSTROUTING) Tj 0 g 1 0 0 1 282.075 130.846 Tm (-o) Tj 0 g 1 0 0 1 301.875 130.846 Tm (ppp0) Tj 0 g 1 0 0 1 334.875 130.846 Tm (-j) Tj 0 g 1 0 0 1 354.675 130.846 Tm (MASQUERADE) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 92.575 Tm (If) Tj 0 g 1 0 0 1 80.049 92.575 Tm (you're) Tj 0 g 1 0 0 1 112.719 92.575 Tm (in) Tj 0 g 1 0 0 1 124.335 92.575 Tm (this) Tj 0 g 1 0 0 1 144.509 92.575 Tm (situation,) Tj 0 g 1 0 0 1 191.589 92.575 Tm (you'll) Tj 0 g 1 0 0 1 219.364 92.575 Tm (also) Tj 0 g 1 0 0 1 242.596 92.575 Tm (want) Tj 0 g 1 0 0 1 268.886 92.575 Tm (to) Tj 0 g 1 0 0 1 281.118 92.575 Tm (convert) Tj 0 g 1 0 0 1 320.245 92.575 Tm (my) Tj 0 g 1 0 0 1 337.966 92.575 Tm (firewall) Tj 0 g 1 0 0 1 375.245 92.575 Tm (scripts) Tj 0 g 1 0 0 1 410.082 92.575 Tm (so) Tj 0 g 1 0 0 1 424.756 92.575 Tm (that) Tj 0 g 1 0 0 1 446.162 92.575 Tm (all) Tj 0 g 1 0 0 1 460.22 92.575 Tm (references) Tj 0 g 1 0 0 1 515.242 92.575 Tm (to) Tj 0 g 1 0 0 1 70.875 79.4 Tm ("eth1") Tj 0 g 1 0 0 1 103.149 79.4 Tm (\(our) Tj 0 g 1 0 0 1 125.765 79.4 Tm (example) Tj 0 g 1 0 0 1 170.392 79.4 Tm (DSL) Tj 0 g 1 0 0 1 194.845 79.4 Tm (router\)) Tj 0 g 1 0 0 1 230.298 79.4 Tm (are) Tj 0 g 1 0 0 1 249.251 79.4 Tm (changed) Tj 0 g 1 0 0 1 294.505 79.4 Tm (to) Tj 0 g 1 0 0 1 306.737 79.4 Tm ("ppp0".) Tj 0 g 1 0 0 1 345.127 79.4 Tm (And) Tj 0 g 1 0 0 1 367.754 79.4 Tm (it's) Tj 0 g 1 0 0 1 383.913 79.4 Tm (perfectly) Tj 0 g 1 0 0 1 428.54 79.4 Tm (fine) Tj 0 g 1 0 0 1 449.33 79.4 Tm (to) Tj 0 g 1 0 0 1 461.562 79.4 Tm (add) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (13) Tj ET endstream endobj 95 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 94 0 R >> endobj 96 0 obj << /Length 19201 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (firewalling) Tj 0 g 1 0 0 1 122.828 761.722 Tm (rules) Tj 0 g 1 0 0 1 149.723 761.722 Tm (that) Tj 0 g 1 0 0 1 171.129 761.722 Tm (refer) Tj 0 g 1 0 0 1 196.803 761.722 Tm (to) Tj 0 g 1 0 0 1 209.035 761.722 Tm ("ppp0") Tj 0 g 1 0 0 1 244.367 761.722 Tm (when) Tj 0 g 1 0 0 1 273.715 761.722 Tm (the) Tj 0 g 1 0 0 1 292.063 761.722 Tm (ppp0) Tj 0 g 1 0 0 1 319.585 761.722 Tm (interface) Tj 0 g 1 0 0 1 364.828 761.722 Tm (doesn't) Tj 0 g 1 0 0 1 403.009 761.722 Tm (yet) Tj 0 g 1 0 0 1 420.741 761.722 Tm (exist.) Tj 0 g 1 0 0 1 449.473 761.722 Tm (As) Tj 0 g 1 0 0 1 465.368 761.722 Tm (soon) Tj 0 g 1 0 0 1 492.274 761.722 Tm (as) Tj 0 g 1 0 0 1 70.875 748.547 Tm (ppp0) Tj 0 g 1 0 0 1 98.397 748.547 Tm (is) Tj 0 g 1 0 0 1 109.397 748.547 Tm (up,) Tj 0 g 1 0 0 1 127.745 748.547 Tm (everything) Tj 0 g 1 0 0 1 181.546 748.547 Tm (will) Tj 0 g 1 0 0 1 199.872 748.547 Tm (work) Tj 0 g 1 0 0 1 226.151 748.547 Tm (perfectly.) Tj 0 g 1 0 0 1 273.836 748.547 Tm (Make) Tj 0 g 1 0 0 1 303.789 748.547 Tm (sure) Tj 0 g 1 0 0 1 328.242 748.547 Tm (you) Tj 0 g 1 0 0 1 349.032 748.547 Tm (enable) Tj 0 g 1 0 0 1 385.112 748.547 Tm (IP) Tj 0 g 1 0 0 1 398.565 748.547 Tm (forwarding) Tj 0 g 1 0 0 1 452.971 748.547 Tm (as) Tj 0 g 1 0 0 1 467.645 748.547 Tm (well.) Tj ET q 0 G 70.875 727.77 m 524.475 727.77 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 698.346 Tm (SNAT) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 674.722 Tm (If) Tj 0 g 1 0 0 1 80.049 674.722 Tm (you're) Tj 0 g 1 0 0 1 112.719 674.722 Tm (using) Tj 0 g 1 0 0 1 142.067 674.722 Tm (DSL) Tj 0 g 1 0 0 1 166.52 674.722 Tm (to) Tj 0 g 1 0 0 1 178.752 674.722 Tm (connect) Tj 0 g 1 0 0 1 220.332 674.722 Tm (to) Tj 0 g 1 0 0 1 232.564 674.722 Tm (the) Tj 0 g 1 0 0 1 250.912 674.722 Tm (Internet,) Tj 0 g 1 0 0 1 294.329 674.722 Tm (you) Tj 0 g 1 0 0 1 315.119 674.722 Tm (probably) Tj 0 g 1 0 0 1 360.362 674.722 Tm (have) Tj 0 g 1 0 0 1 387.268 674.722 Tm (one) Tj 0 g 1 0 0 1 408.674 674.722 Tm (of) Tj 0 g 1 0 0 1 420.906 674.722 Tm (two) Tj 0 g 1 0 0 1 441.08 674.722 Tm (possible) Tj 0 g 1 0 0 1 70.875 661.547 Tm (configurations.) Tj 0 g 1 0 0 1 145.466 661.547 Tm (One) Tj 0 g 1 0 0 1 169.314 661.547 Tm (possibility) Tj 0 g 1 0 0 1 220.046 661.547 Tm (is) Tj 0 g 1 0 0 1 231.046 661.547 Tm (that) Tj 0 g 1 0 0 1 252.452 661.547 Tm (your) Tj 0 g 1 0 0 1 276.905 661.547 Tm (DSL) Tj 0 g 1 0 0 1 301.358 661.547 Tm (router) Tj 0 g 1 0 0 1 333.148 661.547 Tm (or) Tj 0 g 1 0 0 1 345.985 661.547 Tm (modem) Tj 0 g 1 0 0 1 385.717 661.547 Tm (has) Tj 0 g 1 0 0 1 406.507 661.547 Tm (its) Tj 0 g 1 0 0 1 420.565 661.547 Tm (own) Tj 0 g 1 0 0 1 443.797 661.547 Tm (IP) Tj 0 g 1 0 0 1 457.25 661.547 Tm (number) Tj 0 g 1 0 0 1 497.598 661.547 Tm (and) Tj 0 g 1 0 0 1 70.875 648.372 Tm (performs) Tj 0 g 1 0 0 1 117.328 648.372 Tm (network) Tj 0 g 1 0 0 1 158.897 648.372 Tm (address) Tj 0 g 1 0 0 1 201.082 648.372 Tm (translation) Tj 0 g 1 0 0 1 254.883 648.372 Tm (for) Tj 0 g 1 0 0 1 270.778 648.372 Tm (you.) Tj 0 g 1 0 0 1 294.626 648.372 Tm (If) Tj 0 g 1 0 0 1 303.8 648.372 Tm (you're) Tj 0 g 1 0 0 1 336.47 648.372 Tm (in) Tj 0 g 1 0 0 1 348.086 648.372 Tm (this) Tj 0 g 1 0 0 1 368.26 648.372 Tm (situation,) Tj 0 g 1 0 0 1 415.34 648.372 Tm (you) Tj 0 g 1 0 0 1 436.13 648.372 Tm (don't) Tj 0 g 1 0 0 1 462.695 648.372 Tm (need) Tj 0 g 1 0 0 1 490.217 648.372 Tm (Linux) Tj 0 g 1 0 0 1 70.875 635.197 Tm (to) Tj 0 g 1 0 0 1 83.107 635.197 Tm (perform) Tj 0 g 1 0 0 1 124.06 635.197 Tm (NAT) Tj 0 g 1 0 0 1 149.118 635.197 Tm (for) Tj 0 g 1 0 0 1 165.013 635.197 Tm (you) Tj 0 g 1 0 0 1 185.803 635.197 Tm (since) Tj 0 g 1 0 0 1 214.535 635.197 Tm (your) Tj 0 g 1 0 0 1 238.988 635.197 Tm (DSL) Tj 0 g 1 0 0 1 263.441 635.197 Tm (router) Tj 0 g 1 0 0 1 295.231 635.197 Tm (is) Tj 0 g 1 0 0 1 306.231 635.197 Tm (taking) Tj 0 g 1 0 0 1 338.637 635.197 Tm (care) Tj 0 g 1 0 0 1 363.09 635.197 Tm (of) Tj 0 g 1 0 0 1 375.322 635.197 Tm (it) Tj 0 g 1 0 0 1 383.88 635.197 Tm (already.) Tj 0 g 1 0 0 1 70.875 608.022 Tm (However,) Tj 0 g 1 0 0 1 120.386 608.022 Tm (if) Tj 0 g 1 0 0 1 128.944 608.022 Tm (you) Tj 0 g 1 0 0 1 149.734 608.022 Tm (want) Tj 0 g 1 0 0 1 176.024 608.022 Tm (to) Tj 0 g 1 0 0 1 188.256 608.022 Tm (have) Tj 0 g 1 0 0 1 215.162 608.022 Tm (more) Tj 0 g 1 0 0 1 243.278 608.022 Tm (control) Tj 0 g 1 0 0 1 2 2000 79.347 608.022 Tm (over) Tj 0 g 1 0 0 1 303.8 608.022 Tm (your) Tj 0 g 1 0 0 1 328.253 608.022 Tm (NAT) Tj 0 g 1 0 0 1 353.311 608.022 Tm (functionality,) Tj 0 g 1 0 0 1 417.507 608.022 Tm (you) Tj 0 g 1 0 0 1 438.297 608.022 Tm (may) Tj 0 g 1 0 0 1 462.134 608.022 Tm (want) Tj 0 g 1 0 0 1 488.424 608.022 Tm (to) Tj 0 g 1 0 0 1 500.656 608.022 Tm (talk) Tj 0 g 1 0 0 1 70.875 594.847 Tm (to) Tj 0 g 1 0 0 1 83.107 594.847 Tm (your) Tj 0 g 1 0 0 1 107.56 594.847 Tm (ISP) Tj 0 g 1 0 0 1 128.35 594.847 Tm (about) Tj 0 g 1 0 0 1 158.93 594.847 Tm (configuring) Tj 0 g 1 0 0 1 215.789 594.847 Tm (your) Tj 0 g 1 0 0 1 240.242 594.847 Tm (DSL) Tj 0 g 1 0 0 1 264.695 594.847 Tm (connection) Tj 0 g 1 0 0 1 320.949 594.847 Tm (so) Tj 0 g 1 0 0 1 335.623 594.847 Tm (that) Tj 0 g 1 0 0 1 357.029 594.847 Tm (your) Tj 0 g 1 0 0 1 381.482 594.847 Tm (DSL) Tj 0 g 1 0 0 1 405.935 594.847 Tm (router) Tj 0 g 1 0 0 1 437.725 594.847 Tm (is) Tj 0 g 1 0 0 1 448.725 594.847 Tm (in) Tj 0 g 1 0 0 1 460.341 594.847 Tm ("bridged) Tj 0 g 1 0 0 1 70.875 581.672 Tm (mode".) Tj 0 g 1 0 0 1 108.407 581.672 Tm (In) Tj 0 g 1 0 0 1 120.639 581.672 Tm (bridged) Tj 0 g 1 0 0 1 160.382 581.672 Tm (mode,) Tj 0 g 1 0 0 1 194.009 581.672 Tm (your) Tj 0 g 1 0 0 1 218.462 581.672 Tm (firewall) Tj 0 g 1 0 0 1 255.741 581.672 Tm (becomes) Tj 0 g 1 0 0 1 303.426 581.672 Tm (an) Tj 0 g 1 0 0 1 318.716 581.672 Tm (official) Tj 0 g 1 0 0 1 352.948 581.672 Tm (part) Tj 0 g 1 0 0 1 374.959 581.672 Tm (of) Tj 0 g 1 0 0 1 387.191 581.672 Tm (your) Tj 0 g 1 0 0 1 411.644 581.672 Tm (ISP's) Tj 0 g 1 0 0 1 440.035 581.672 Tm (network,) Tj 0 g 1 0 0 1 484.662 581.672 Tm (and) Tj 0 g 1 0 0 1 70.875 568.497 Tm (your) Tj 0 g 1 0 0 1 95.328 568.497 Tm (DSL) Tj 0 g 1 0 0 1 119.781 568.497 Tm (router) Tj 0 g 1 0 0 1 151.571 568.497 Tm (transparently) Tj 0 g 1 0 0 1 218.209 568.497 Tm (forwards) Tj 0 g 1 0 0 1 263.441 568.497 Tm (IP) Tj 0 g 1 0 0 1 276.894 568.497 Tm (traffic) Tj 0 g 1 0 0 1 306.847 568.497 Tm (back) Tj 0 g 1 0 0 1 333.137 568.497 Tm (and) Tj 0 g 1 0 0 1 354.543 568.497 Tm (forth) Tj 0 g 1 0 0 1 379.612 568.497 Tm (between) Tj 0 g 1 0 0 1 424.25 568.497 Tm (your) Tj 0 g 1 0 0 1 448.703 568.497 Tm (ISP) Tj 0 g 1 0 0 1 469.493 568.497 Tm (and) Tj 0 g 1 0 0 1 490.899 568.497 Tm (your) Tj 0 g 1 0 0 1 70.875 555.322 Tm (Linux) Tj 0 g 1 0 0 1 100.223 555.322 Tm (box) Tj 0 g 1 0 0 1 121.013 555.322 Tm (without) Tj 0 g 1 0 0 1 158.919 555.322 Tm (letting) Tj 0 g 1 0 0 1 191.325 555.322 Tm (anyone) Tj 0 g 1 0 0 1 230.463 555.322 Tm (know) Tj 0 g 1 0 0 1 259.195 555.322 Tm (that) Tj 0 g 1 0 0 1 280.601 555.322 Tm (it's) Tj 0 g 1 0 0 1 296.76 555.322 Tm (there.) Tj 0 g 1 0 0 1 327.945 555.322 Tm (It) Tj 0 g 1 0 0 1 337.119 555.322 Tm (no) Tj 0 g 1 0 0 1 352.409 555.322 Tm (longer) Tj 0 g 1 0 0 1 386.036 555.322 Tm (has) Tj 0 g 1 0 0 1 406.826 555.322 Tm (an) Tj 0 g 1 0 0 1 422.116 555.322 Tm (IP) Tj 0 g 1 0 0 1 435.569 555.322 Tm (number;) Tj 0 g 1 0 0 1 478.975 555.322 Tm (instead,) Tj 0 g 1 0 0 1 70.875 542.147 Tm (eth1) Tj 0 g 1 0 0 1 95.339 542.147 Tm (\(in) Tj 0 g 1 0 0 1 110.618 542.147 Tm (our) Tj 0 g 1 0 0 1 129.571 542.147 Tm (example\)) Tj 0 g 1 0 0 1 177.861 542.147 Tm (sports) Tj 0 g 1 0 0 1 210.872 542.147 Tm (the) Tj 0 g 1 0 0 1 229.22 542.147 Tm (IP.) Tj 0 g 1 0 0 1 245.731 542.147 Tm (If) Tj 0 g 1 0 0 1 254.905 542.147 Tm (someone) Tj 0 g 1 0 0 1 303.206 542.147 Tm (pings) Tj 0 g 1 0 0 1 332.554 542.147 Tm (your) Tj 0 g 1 0 0 1 357.007 542.147 Tm (IP) Tj 0 g 1 0 0 1 370.46 542.147 Tm (from) Tj 0 g 1 0 0 1 395.518 542.147 Tm (the) Tj 0 g 1 0 0 1 413.866 542.147 Tm (Internet,) Tj 0 g 1 0 0 1 457.283 542.147 Tm (they) Tj 0 g 1 0 0 1 481.131 542.147 Tm (get) Tj 0 g 1 0 0 1 499.479 542.147 Tm (a) Tj 0 g 1 0 0 1 70.875 528.972 Tm (reply) Tj 0 g 1 0 0 1 97.77 528.972 Tm (back) Tj 0 g 1 0 0 1 124.06 528.972 Tm (from) Tj 0 g 1 0 0 1 149.118 528.972 Tm (your) Tj 0 g 1 0 0 1 173.571 528.972 Tm (Linux) Tj 0 g 1 0 0 1 202.919 528.972 Tm (box,) Tj 0 g 1 0 0 1 226.767 528.972 Tm (rather) Tj 0 g 1 0 0 1 258.557 528.972 Tm (than) Tj 0 g 1 0 0 1 283.021 528.972 Tm (your) Tj 0 g 1 0 0 1 307.474 528.972 Tm (router.) Tj ET q 0 G 70.875 508.195 m 524.475 508.195 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 478.771 Tm (SNAT,) Tj 0 g 1 0 0 1 128.889 478.771 Tm (continued) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 455.147 Tm (With) Tj 0 g 1 0 0 1 95.933 455.147 Tm (this) Tj 0 g 1 0 0 1 116.107 455.147 Tm (kind) Tj 0 g 1 0 0 1 139.339 455.147 Tm (of) Tj 0 g 1 0 0 1 151.571 455.147 Tm (setup,) Tj 0 g 1 0 0 1 184.593 455.147 Tm (you'll) Tj 0 g 1 0 0 1 212.368 455.147 Tm (want) Tj 0 g 1 0 0 1 238.658 455.147 Tm (to) Tj 0 g 1 0 0 1 250.89 455.147 Tm (use) Tj 0 g 1 0 0 1 271.68 455.147 Tm (SNAT) Tj 0 g 1 0 0 1 304.075 455.147 Tm (\(source) Tj 0 g 1 0 0 1 343.807 455.147 Tm (NAT\)) Tj 0 g 1 0 0 1 372.528 455.147 Tm (rather) Tj 0 g 1 0 0 1 404.318 455.147 Tm (than) Tj 0 g 1 0 0 1 428.782 455.147 Tm (masquerading.) Tj 0 g 1 0 0 1 70.875 441.972 Tm (Here's) Tj 0 g 1 0 0 1 105.371 441.972 Tm (the) Tj 0 g 1 0 0 1 123.719 441.972 Tm (line) Tj 0 g 1 0 0 1 143.893 441.972 Tm (you) Tj 0 g 1 0 0 1 164.683 441.972 Tm (should) Tj 0 g 1 0 0 1 200.147 441.972 Tm (add) Tj 0 g 1 0 0 1 221.553 441.972 Tm (to) Tj 0 g 1 0 0 1 233.785 441.972 Tm (your) Tj 0 g 1 0 0 1 258.238 441.972 Tm (firewall:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 415.776 Tm (iptables) Tj 0 g 1 0 0 1 136.875 415.776 Tm (-t) Tj 0 g 1 0 0 1 156.675 415.776 Tm (nat) Tj 0 g 1 0 0 1 183.075 415.776 Tm (-A) Tj 0 g 1 0 0 1 202.875 415.776 Tm (POSTROUTING) Tj 0 g 1 0 0 1 282.075 415.776 Tm (-o) Tj 0 g 1 0 0 1 301.875 415.776 Tm (eth1) Tj 0 g 1 0 0 1 334.875 415.776 Tm (-j) Tj 0 g 1 0 0 1 354.675 415.776 Tm (SNAT) Tj 0 g 1 0 0 1 387.675 415.776 Tm (--to) Tj 0 g 1 0 0 1 420.675 415.776 Tm (1.2.3.4) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 377.505 Tm (In) Tj 0 g 1 0 0 1 83.107 377.505 Tm (this) Tj 0 g 1 0 0 1 103.281 377.505 Tm (example,) Tj 0 g 1 0 0 1 150.966 377.505 Tm (eth1) Tj 0 g 1 0 0 1 175.43 377.505 Tm (should) Tj 0 g 1 0 0 1 210.894 377.505 Tm (be) Tj 0 g 1 0 0 1 226.184 377.505 Tm (changed) Tj 0 g 1 0 0 1 271.438 377.505 Tm (to) Tj 0 g 1 0 0 1 283.67 377.505 Tm (the) Tj 0 g 1 0 0 1 302.018 377.505 Tm (ethernet) Tj 0 g 1 0 0 1 345.435 377.505 Tm (interface) Tj 0 g 1 0 0 1 390.678 377.505 Tm (connected) Tj 0 g 1 0 0 1 444.49 377.505 Tm (directly) Tj 0 g 1 0 0 1 482.385 377.505 Tm (to) Tj 0 g 1 0 0 1 494.617 377.505 Tm (your) Tj 0 g 1 0 0 1 70.875 364.33 Tm (DSL) Tj 0 g 1 0 0 1 95.328 364.33 Tm (router,) Tj 0 g 1 0 0 1 130.176 364.33 Tm (and) Tj 0 g 1 0 0 1 151.582 364.33 Tm (1.2.3.4) Tj 0 g 1 0 0 1 188.278 364.33 Tm (should) Tj 0 g 1 0 0 1 223.742 364.33 Tm (be) Tj 0 g 1 0 0 1 239.032 364.33 Tm (changed) Tj 0 g 1 0 0 1 284.286 364.33 Tm (to) Tj 0 g 1 0 0 1 296.518 364.33 Tm (your) Tj 0 g 1 0 0 1 320.971 364.33 Tm (static) Tj 0 g 1 0 0 1 349.703 364.33 Tm (IP) Tj 0 g 1 0 0 1 363.156 364.33 Tm (\(the) Tj 0 g 1 0 0 1 385.167 364.33 Tm (IP) Tj 0 g 1 0 0 1 398.62 364.33 Tm (of) Tj 0 g 1 0 0 1 410.852 364.33 Tm (your) Tj 0 g 1 0 0 1 435.305 364.33 Tm (ethernet) Tj 0 g 1 0 0 1 70.875 351.155 Tm (interface\).) Tj 0 g 1 0 0 1 122.839 351.155 Tm (Again,) Tj 0 g 1 0 0 1 157.082 351.155 Tm (remember) Tj 0 g 1 0 0 1 210.256 351.155 Tm (to) Tj 0 g 1 0 0 1 222.488 351.155 Tm (enable) Tj 0 g 1 0 0 1 258.568 351.155 Tm (IP) Tj 0 g 1 0 0 1 272.021 351.155 Tm (forwarding.) Tj ET q 0 G 70.875 330.378 m 524.475 330.378 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 300.954 Tm (NAT) Tj 0 g 1 0 0 1 111.879 300.954 Tm (issues) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 277.33 Tm (Fortunately) Tj 0 g 1 0 0 1 128.955 277.33 Tm (for) Tj 0 g 1 0 0 1 144.85 277.33 Tm (us,) Tj 0 g 1 0 0 1 162.582 277.33 Tm (NAT) Tj 0 g 1 0 0 1 187.64 277.33 Tm (and) Tj 0 g 1 0 0 1 209.046 277.33 Tm (masquerading) Tj 0 g 1 0 0 1 281.8 277.33 Tm (get) Tj 0 g 1 0 0 1 300.148 277.33 Tm (along) Tj 0 g 1 0 0 1 330.112 277.33 Tm (just) Tj 0 g 1 0 0 1 350.286 277.33 Tm (fine) Tj 0 g 1 0 0 1 371.076 277.33 Tm (with) Tj 0 g 1 0 0 1 393.692 277.33 Tm (a) Tj 0 g 1 0 0 1 402.866 277.33 Tm (firewall.) Tj 0 g 1 0 0 1 443.203 277.33 Tm (When) Tj 0 g 1 0 0 1 474.993 277.33 Tm (writing) Tj 0 g 1 0 0 1 70.875 264.155 Tm (your) Tj 0 g 1 0 0 1 95.328 264.155 Tm (firewa 2000 ll) Tj 0 g 1 0 0 1 132.607 264.155 Tm (filtering) Tj 0 g 1 0 0 1 171.118 264.155 Tm (rules,) Tj 0 g 1 0 0 1 201.071 264.155 Tm (just) Tj 0 g 1 0 0 1 221.245 264.155 Tm (ignore) Tj 0 g 1 0 0 1 254.872 264.155 Tm (the) Tj 0 g 1 0 0 1 273.22 264.155 Tm (fact) Tj 0 g 1 0 0 1 294.01 264.155 Tm (that) Tj 0 g 1 0 0 1 315.416 264.155 Tm (you're) Tj 0 g 1 0 0 1 348.086 264.155 Tm (using) Tj 0 g 1 0 0 1 377.434 264.155 Tm (NAT.) Tj 0 g 1 0 0 1 405.55 264.155 Tm (Your) Tj 0 g 1 0 0 1 431.84 264.155 Tm (rules) Tj 0 g 1 0 0 1 458.735 264.155 Tm (should) Tj 0 g 1 0 0 1 70.875 250.98 Tm (accept,) Tj 0 g 1 0 0 1 109.397 250.98 Tm (drop,) Tj 0 g 1 0 0 1 137.524 250.98 Tm (or) Tj 0 g 1 0 0 1 150.361 250.98 Tm (reject) Tj 0 g 1 0 0 1 180.314 250.98 Tm (packets) Tj 0 g 1 0 0 1 221.278 250.98 Tm (based) Tj 0 g 1 0 0 1 254.3 250.98 Tm (on) Tj 0 g 1 0 0 1 269.59 250.98 Tm (their) Tj 0 g 1 0 0 1 294.043 250.98 Tm ("real") Tj 0 g 1 0 0 1 323.248 250.98 Tm (source) Tj 0 g 1 0 0 1 359.317 250.98 Tm (and) Tj 0 g 1 0 0 1 380.723 250.98 Tm (destination) Tj 0 g 1 0 0 1 436.977 250.98 Tm (addresses.) Tj 0 g 1 0 0 1 493.836 250.98 Tm (The) Tj 0 g 1 0 0 1 70.875 237.805 Tm (firewall) Tj 0 g 1 0 0 1 108.154 237.805 Tm (filtering) Tj 0 g 1 0 0 1 146.665 237.805 Tm (code) Tj 0 g 1 0 0 1 173.571 237.805 Tm (sees) Tj 0 g 1 0 0 1 199.861 237.805 Tm (the) Tj 0 g 1 0 0 1 218.209 237.805 Tm (original) Tj 0 g 1 0 0 1 256.72 237.805 Tm (source) Tj 0 g 1 0 0 1 292.789 237.805 Tm (address) Tj 0 g 1 0 0 1 334.974 237.805 Tm (for) Tj 0 g 1 0 0 1 350.869 237.805 Tm (a) Tj 0 g 1 0 0 1 360.043 237.805 Tm (packet,) Tj 0 g 1 0 0 1 398.565 237.805 Tm (and) Tj 0 g 1 0 0 1 419.971 237.805 Tm (the) Tj 0 g 1 0 0 1 438.319 237.805 Tm (final) Tj 0 g 1 0 0 1 461.551 237.805 Tm (destination) Tj 0 g 1 0 0 1 70.875 224.63 Tm (address.) Tj 0 g 1 0 0 1 116.118 224.63 Tm (This) Tj 0 g 1 0 0 1 139.955 224.63 Tm (is) Tj 0 g 1 0 0 1 150.955 224.63 Tm (great) Tj 0 g 1 0 0 1 179.082 224.63 Tm (for) Tj 0 g 1 0 0 1 194.977 224.63 Tm (us,) Tj 0 g 1 0 0 1 212.709 224.63 Tm (because) Tj 0 g 1 0 0 1 257.347 224.63 Tm (it) Tj 0 g 1 0 0 1 265.905 224.63 Tm (allows) Tj 0 g 1 0 0 1 299.521 224.63 Tm (our) Tj 0 g 1 0 0 1 318.474 224.63 Tm (firewall) Tj 0 g 1 0 0 1 355.753 224.63 Tm (to) Tj 0 g 1 0 0 1 367.985 224.63 Tm (continue) Tj 0 g 1 0 0 1 412.623 224.63 Tm (working) Tj 0 g 1 0 0 1 453.576 224.63 Tm (properly) Tj 0 g 1 0 0 1 496.366 224.63 Tm (even) Tj 0 g 1 0 0 1 70.875 211.455 Tm (if) Tj 0 g 1 0 0 1 79.433 211.455 Tm (we) Tj 0 g 1 0 0 1 96.549 211.455 Tm (temporarily) Tj 0 g 1 0 0 1 154.002 211.455 Tm (disable) Tj 0 g 1 0 0 1 191.908 211.455 Tm (NAT) Tj 0 g 1 0 0 1 216.966 211.455 Tm (or) Tj 0 g 1 0 0 1 229.803 211.455 Tm (masquerading.) Tj ET q 0 G 70.875 190.678 m 524.475 190.678 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 161.254 Tm (Understanding) Tj 0 g 1 0 0 1 192.933 161.254 Tm (tables) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 137.63 Tm (In) Tj 0 g 1 0 0 1 83.107 137.63 Tm (the) Tj 0 g 1 0 0 1 101.455 137.63 Tm (above) Tj 0 g 1 0 0 1 134.477 137.63 Tm (NAT/masquerading) Tj 0 g 1 0 0 1 232.289 137.63 Tm (examples,) Tj 0 g 1 0 0 1 285.474 137.63 Tm (we're) Tj 0 g 1 0 0 1 314.47 137.63 Tm (appending) Tj 0 g 1 0 0 1 368.898 137.63 Tm (rules) Tj 0 g 1 0 0 1 395.793 137.63 Tm (to) Tj 0 g 1 0 0 1 408.025 137.63 Tm (a) Tj 0 g 1 0 0 1 417.199 137.63 Tm (chain,) Tj 0 g 1 0 0 1 449.605 137.63 Tm (but) Tj 0 g 1 0 0 1 467.953 137.63 Tm (we're) Tj 0 g 1 0 0 1 496.949 137.63 Tm (also) Tj 0 g 1 0 0 1 70.875 124.455 Tm (doing) Tj 0 g 1 0 0 1 100.839 124.455 Tm (something) Tj 0 g 1 0 0 1 154.64 124.455 Tm (a) Tj 0 g 1 0 0 1 163.814 124.455 Tm (bit) Tj 0 g 1 0 0 1 178.488 124.455 Tm (different.) Tj 0 g 1 0 0 1 224.347 124.455 Tm (Notice) Tj 0 g 1 0 0 1 258.579 124.455 Tm (the) Tj 0 g 1 0 0 1 276.927 124.455 Tm ("-t") Tj 0 g 1 0 0 1 297.277 124.455 Tm (option.) Tj 0 g 1 0 0 1 333.357 124.455 Tm (The) Tj 0 g 1 0 0 1 355.368 124.455 Tm ("-t") Tj 0 g 1 0 0 1 375.718 124.455 Tm (option) Tj 0 g 1 0 0 1 408.74 124.455 Tm (allows) Tj 0 g 1 0 0 1 442.356 124.455 Tm (us) Tj 0 g 1 0 0 1 457.03 124.455 Tm (to) Tj 0 g 1 0 0 1 469.262 124.455 Tm (specify) Tj 0 g 1 0 0 1 506.552 124.455 Tm (the) Tj 0 g 1 0 0 1 70.875 111.28 Tm (table) Tj 0 g 1 0 0 1 97.781 111.28 Tm (that) Tj 0 g 1 0 0 1 119.187 111.28 Tm (our) Tj 0 g 1 0 0 1 138.14 111.28 Tm (chain) Tj 0 g 1 0 0 1 167.488 111.28 Tm (belongs) Tj 0 g 1 0 0 1 209.068 111.28 Tm (to.) Tj 0 g 1 0 0 1 224.358 111.28 Tm (When) Tj 0 g 1 0 0 1 256.148 111.28 Tm (omitted,) Tj 0 g 1 0 0 1 298.333 111.28 Tm (the) Tj 0 g 1 0 0 1 316.681 111.28 Tm (default) Tj 0 g 1 0 0 1 352.761 111.28 Tm (table) Tj 0 g 1 0 0 1 379.667 111.28 Tm (defaults) Tj 0 g 1 0 0 1 421.247 111.28 Tm (to) Tj 0 g 1 0 0 1 433.479 111.28 Tm ("filter".) Tj 0 g 1 0 0 1 468.184 111.28 Tm (So,) Tj 0 g 1 0 0 1 487.753 111.28 Tm (all) Tj 0 g 1 0 0 1 501.811 111.28 Tm (our) Tj 0 g 1 0 0 1 70.875 98.105 Tm (previous) Tj 0 g 1 0 0 1 115.502 98.105 Tm (non-NAT) Tj 0 g 1 0 0 1 165.332 98.105 Tm (related) Tj 0 g 1 0 0 1 202.017 98.105 Tm (commands) Tj 0 g 1 0 0 1 258.865 98.105 Tm (were) Tj 0 g 1 0 0 1 285.76 98.105 Tm (modifying) Tj 0 g 1 0 0 1 335.887 98.105 Tm (the) Tj 0 g 1 0 0 1 354.235 98.105 Tm (INPUT) Tj 0 g 1 0 0 1 390.293 98.105 Tm (chain) Tj 0 g 1 0 0 1 419.641 98.105 Tm (that's) Tj 0 g 1 0 0 1 448.648 98.105 Tm (part) Tj 0 g 1 0 0 1 470.659 98.105 Tm (of) Tj 0 g 1 0 0 1 482.891 98.105 Tm (the) Tj 0 g 1 0 0 1 70.875 84.93 Tm ("filter") Tj 0 g 1 0 0 1 102.522 84.93 Tm (table.) Tj 0 g 1 0 0 1 132.486 84.93 Tm (The) Tj 0 g 1 0 0 1 154.497 84.93 Tm ("filter") Tj 0 g 1 0 0 1 186.144 84.93 Tm (table) Tj 0 g 1 0 0 1 213.05 84.93 Tm (contains) Tj 0 g 1 0 0 1 257.072 84.93 Tm (all) Tj 0 g 1 0 0 1 271.13 84.93 Tm (the) Tj 0 g 1 0 0 1 289.478 84.93 Tm (rules) Tj 0 g 1 0 0 1 316.373 84.93 Tm (associated) Tj 0 g 1 0 0 1 372.011 84.93 Tm (with) Tj 0 g 1 0 0 1 394.627 84.93 Tm (accepting) Tj 0 g 1 0 0 1 444.765 84.93 Tm (or) Tj 0 g 1 0 0 1 457.602 84.93 Tm (rejecting) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (14) Tj ET endstream endobj 97 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 96 0 R >> endobj 98 0 obj << /Length 12821 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (packets,) Tj 0 g 1 0 0 1 114.897 761.722 Tm (while) Tj 0 g 1 0 0 1 143.013 761.722 Tm (the) Tj 0 g 1 0 0 1 161.361 761.722 Tm ("nat") Tj 0 g 1 0 0 1 187.519 761.722 Tm (table) Tj 0 g 1 0 0 1 214.425 761.722 Tm (\(as) Tj 0 g 1 0 0 1 232.762 761.722 Tm (you) Tj 0 g 1 0 0 1 253.552 761.722 Tm (would) Tj 0 g 1 0 0 1 285.342 761.722 Tm (assume\)) Tj 0 g 1 0 0 1 330.574 761.722 Tm (contains) Tj 0 g 1 0 0 1 374.596 761.722 Tm (rules) Tj 0 g 1 0 0 1 401.491 761.722 Tm (relating) Tj 0 g 1 0 0 1 440.618 761.722 Tm (to) Tj 0 g 1 0 0 1 452.85 761.722 Tm (network) Tj 0 g 1 0 0 1 70.875 748.547 Tm (address) Tj 0 g 1 0 0 1 113.06 748.547 Tm (translation.) Tj 0 g 1 0 0 1 169.919 748.547 Tm (There) Tj 0 g 1 0 0 1 201.709 748.547 Tm (are) Tj 0 g 1 0 0 1 220.662 748.547 Tm (also) Tj 0 g 1 0 0 1 243.894 748.547 Tm (other) Tj 0 g 1 0 0 1 272.021 748.547 Tm (built-in) Tj 0 g 1 0 0 1 310.235 748.547 Tm (iptables) Tj 0 g 1 0 0 1 351.199 748.547 Tm (chains) Tj 0 g 1 0 0 1 386.047 748.547 Tm (and) Tj 0 g 1 0 0 1 407.453 748.547 Tm (they) Tj 0 g 1 0 0 1 431.301 748.547 Tm (are) Tj 0 g 1 0 0 1 450.254 748.547 Tm (described) Tj 0 g 1 0 0 1 500.997 748.547 Tm (in) Tj 0 g 1 0 0 1 70.875 735.372 Tm (detail) Tj 0 g 1 0 0 1 100.223 735.372 Tm (in) Tj 0 g 1 0 0 1 111.839 735.372 Tm (the) Tj 0 g 1 0 0 1 130.187 735.372 2000 Tm (iptables) Tj 0 g 1 0 0 1 171.151 735.372 Tm (man) Tj 0 g 1 0 0 1 195.604 735.372 Tm (page,) Tj 0 g 1 0 0 1 226.184 735.372 Tm (as) Tj 0 g 1 0 0 1 240.858 735.372 Tm (well) Tj 0 g 1 0 0 1 262.858 735.372 Tm (as) Tj 0 g 1 0 0 1 277.532 735.372 Tm (in) Tj 0 g 1 0 0 1 289.148 735.372 Tm (Rusty's) Tj 0 g 1 0 0 1 327.923 735.372 Tm (HOWTOs) Tj 0 g 1 0 0 1 378.644 735.372 Tm (\(see) Tj 0 g 1 0 0 1 403.097 735.372 Tm (the) Tj 0 g 1 0 0 1 421.445 735.372 Tm (Resources) Tj 0 g 1 0 0 1 477.072 735.372 Tm (section) Tj 0 g 1 0 0 1 514.978 735.372 Tm (at) Tj 0 g 1 0 0 1 70.875 722.197 Tm (the) Tj 0 g 1 0 0 1 89.223 722.197 Tm (end) Tj 0 g 1 0 0 1 110.629 722.197 Tm (of) Tj 0 g 1 0 0 1 122.861 722.197 Tm (this) Tj 0 g 1 0 0 1 143.035 722.197 Tm (tutorial) Tj 0 g 1 0 0 1 179.104 722.197 Tm (for) Tj 0 g 1 0 0 1 194.999 722.197 Tm (links\).) Tj ET q 0 G 70.875 701.42 m 524.475 701.42 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 671.996 Tm (Our) Tj 0 g 1 0 0 1 105.885 671.996 Tm (enhanced) Tj 0 g 1 0 0 1 189.945 671.996 Tm (script) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 648.372 Tm (Now) Tj 0 g 1 0 0 1 95.933 648.372 Tm (that) Tj 0 g 1 0 0 1 117.339 648.372 Tm (we've) Tj 0 g 1 0 0 1 148.172 648.372 Tm (taken) Tj 0 g 1 0 0 1 178.136 648.372 Tm (a) Tj 0 g 1 0 0 1 187.31 648.372 Tm (look) Tj 0 g 1 0 0 1 210.542 648.372 Tm (at) Tj 0 g 1 0 0 1 222.774 648.372 Tm (a) Tj 0 g 1 0 0 1 231.948 648.372 Tm (bunch) Tj 0 g 1 0 0 1 264.97 648.372 Tm (of) Tj 0 g 1 0 0 1 277.202 648.372 Tm (possible) Tj 0 g 1 0 0 1 320.608 648.372 Tm (enhancements,) Tj 0 g 1 0 0 1 398.873 648.372 Tm (it's) Tj 0 g 1 0 0 1 415.032 648.372 Tm (time) Tj 0 g 1 0 0 1 438.869 648.372 Tm (to) Tj 0 g 1 0 0 1 451.101 648.372 Tm (take) Tj 0 g 1 0 0 1 474.949 648.372 Tm (a) Tj 0 g 1 0 0 1 484.123 648.372 Tm (look) Tj 0 g 1 0 0 1 507.355 648.372 Tm (at) Tj 0 g 1 0 0 1 70.875 635.197 Tm (a) Tj 0 g 1 0 0 1 80.049 635.197 Tm (second) Tj 0 g 1 0 0 1 118.571 635.197 Tm (more) Tj 0 g 1 0 0 1 146.687 635.197 Tm (flexible) Tj 0 g 1 0 0 1 183.977 635.197 Tm (firewall) Tj 0 g 1 0 0 1 221.256 635.197 Tm (up/down) Tj 0 g 1 0 0 1 265.894 635.197 Tm (script:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 609.001 Tm (#!/bin/bash) Tj 0 g 1 0 0 1 77.475 585.709 Tm (#) Tj 0 g 1 0 0 1 90.675 585.709 Tm (An) Tj 0 g 1 0 0 1 110.475 585.709 Tm (enhanced) Tj 0 g 1 0 0 1 169.875 585.709 Tm (stateful) Tj 0 g 1 0 0 1 229.275 585.709 Tm (firewall) Tj 0 g 1 0 0 1 288.675 585.709 Tm (for) Tj 0 g 1 0 0 1 315.075 585.709 Tm (a) Tj 0 g 1 0 0 1 328.275 585.709 Tm (workstation,) Tj 0 g 1 0 0 1 414.075 585.709 Tm (laptop) Tj 0 g 1 0 0 1 460.275 585.709 Tm (or) Tj 0 g 1 0 0 1 480.075 585.709 Tm (router) Tj 0 g 1 0 0 1 526.275 585.709 Tm (that) Tj 0 g 1 0 0 1 559.275 585.709 Tm (isn't) Tj 0 g 1 0 0 1 77.475 574.063 Tm (#) Tj 0 g 1 0 0 1 90.675 574.063 Tm (running) Tj 0 g 1 0 0 1 143.475 574.063 Tm (any) Tj 0 g 1 0 0 1 169.875 574.063 Tm (network) Tj 0 g 1 0 0 1 222.675 574.063 Tm (services) Tj 0 g 1 0 0 1 282.075 574.063 Tm (like) Tj 0 g 1 0 0 1 315.075 574.063 Tm (a) Tj 0 g 1 0 0 1 328.275 574.063 Tm (web) Tj 0 g 1 0 0 1 354.675 574.063 Tm (server,) Tj 0 g 1 0 0 1 407.475 574.063 Tm (SMTP) Tj 0 g 1 0 0 1 440.475 574.063 Tm (server,) Tj 0 g 1 0 0 1 493.275 574.063 Tm (ftp) Tj 0 g 1 0 0 1 519.675 574.063 Tm (server,) Tj 0 g 1 0 0 1 572.475 574.063 Tm (etc.) Tj 0 g 1 0 0 1 77.475 550.771 Tm (#change) Tj 0 g 1 0 0 1 130.275 550.771 Tm (this) Tj 0 g 1 0 0 1 163.275 550.771 Tm (to) Tj 0 g 1 0 0 1 183.075 550.771 Tm (the) Tj 0 g 1 0 0 1 209.475 550.771 Tm (name) Tj 0 g 1 0 0 1 242.475 550.771 Tm (of) Tj 0 g 1 0 0 1 262.275 550.771 Tm (the) Tj 0 g 1 0 0 1 288.675 550.771 Tm (interface) Tj 0 g 1 0 0 1 354.675 550.771 Tm (that) Tj 0 g 1 0 0 1 387.675 550.771 Tm (provides) Tj 0 g 1 0 0 1 447.075 550.771 Tm (your) Tj 0 g 1 0 0 1 480.075 550.771 Tm ("uplink") Tj 0 g 1 0 0 1 77.475 539.125 Tm (#\(connection) Tj 0 g 1 0 0 1 163.275 539.125 Tm (to) Tj 0 g 1 0 0 1 183.075 539.125 Tm (the) Tj 0 g 1 0 0 1 209.475 539.125 Tm (Internet\)) Tj 0 g 1 0 0 1 77.475 515.833 Tm (UPLINK="eth1") Tj 0 g 1 0 0 1 77.475 492.541 Tm (#if) Tj 0 g 1 0 0 1 103.875 492.541 Tm (you're) Tj 0 g 1 0 0 1 150.075 492.541 Tm (a) Tj 0 g 1 0 0 1 163.275 492.541 Tm (router) Tj 0 g 1 0 0 1 209.475 492.541 Tm (\(and) Tj 0 g 1 0 0 1 242.475 492.541 Tm (thus) Tj 0 g 1 0 0 1 275.475 492.541 Tm (should) Tj 0 g 1 0 0 1 321.675 492.541 Tm (forward) Tj 0 g 1 0 0 1 374.475 492.541 Tm (IP) Tj 0 g 1 0 0 1 394.275 492.541 Tm (packets) Tj 0 g 1 0 0 1 447.075 492.541 Tm (between) Tj 0 g 1 0 0 1 499.875 492.541 Tm (interfaces\),) Tj 0 g 1 0 0 1 77.475 480.895 Tm (#you) Tj 0 g 1 0 0 1 110.475 480.895 Tm (want) Tj 0 g 1 0 0 1 143.475 480.895 Tm (ROUTER="yes";) Tj 0 g 1 0 0 1 235.875 480.895 Tm (otherwise,) Tj 0 g 1 0 0 1 308.475 480.895 Tm (ROUTER="no") Tj 0 g 1 0 0 1 77.475 457.603 Tm (ROUTER="yes") Tj 0 g 1 0 0 1 77.475 434.311 Tm (#change) Tj 0 g 1 0 0 1 130.275 434.311 Tm (this) Tj 0 g 1 0 0 1 163.275 434.311 Tm (next) Tj 0 g 1 0 0 1 196.275 434.311 Tm (line) Tj 0 g 1 0 0 1 229.275 434.311 Tm (to) Tj 0 g 1 0 0 1 249.075 434.311 Tm (the) Tj 0 g 1 0 0 1 275.475 434.311 Tm (static) Tj 0 g 1 0 0 1 321.675 434.311 Tm (IP) Tj 0 g 1 0 0 1 341.475 434.311 Tm (of) Tj 0 g 1 0 0 1 361.275 434.311 Tm (your) Tj 0 g 1 0 0 1 394.275 434.311 Tm (uplink) Tj 0 g 1 0 0 1 440.475 434.311 Tm (interface) Tj 0 g 1 0 0 1 506.475 434.311 Tm (for) Tj 0 g 1 0 0 1 532.875 434.311 Tm (static) Tj 0 g 1 0 0 1 579.075 434.311 Tm (SNAT,) Tj 0 g 1 0 0 1 618.675 434.311 Tm (or) Tj 0 g 1 0 0 1 77.475 422.665 Tm (#"dynamic") Tj 0 g 1 0 0 1 150.075 422.665 Tm (if) Tj 0 g 1 0 0 1 169.875 422.665 Tm (you) Tj 0 g 1 0 0 1 196.275 422.665 Tm (have) Tj 0 g 1 0 0 1 229.275 422.665 Tm (a) Tj 0 g 1 0 0 1 242.475 422.665 Tm (dynamic) Tj 0 g 1 0 0 1 295.275 422.665 Tm (IP.) Tj 0 g 1 0 0 1 328.275 422.665 Tm (If) Tj 0 g 1 0 0 1 348.075 422.665 Tm (you) Tj 0 g 1 0 0 1 374.475 422.665 Tm (don't) Tj 0 g 1 0 0 1 414.075 422.665 Tm (need) Tj 0 g 1 0 0 1 447.075 422.665 Tm (any) Tj 0 g 1 0 0 1 473.475 422.665 Tm (NAT,) Tj 0 g 1 0 0 1 506.475 422.665 Tm (set) Tj 0 g 1 0 0 1 532.875 422.665 Tm (NAT) Tj 0 g 1 0 0 1 559.275 422.665 Tm (to) Tj 0 g 1 0 0 1 579.075 422.665 Tm ("") Tj 0 g 1 0 0 1 598.875 422.665 Tm (to) Tj 0 g 1 0 0 1 77.475 411.019 Tm (#disable) Tj 0 g 1 0 0 1 136.875 411.019 Tm (it.) Tj 0 g 1 0 0 1 77.475 387.727 Tm (NAT="1.2.3.4") Tj 0 g 1 0 0 1 77.475 364.435 Tm (#change) Tj 0 g 1 0 0 1 130.275 364.435 Tm (this) Tj 0 g 1 0 0 1 163.275 364.435 Tm (next) Tj 0 g 1 0 0 1 196.275 364.435 Tm (line) Tj 0 g 1 0 0 1 229.275 364.435 Tm (so) Tj 0 g 1 0 0 1 249.075 364.435 Tm (it) Tj 0 g 1 0 0 1 268.875 364.435 Tm (lists) Tj 0 g 1 0 0 1 308.475 364.435 Tm (all) Tj 0 g 1 0 0 1 334.875 364.435 Tm (your) Tj 0 g 1 0 0 1 367.875 364.435 Tm (network) Tj 0 g 1 0 0 1 420.675 364.435 Tm (interfaces,) Tj 0 g 1 0 0 1 499.875 364.435 Tm (including) Tj 0 g 1 0 0 1 565.875 364.435 Tm (lo) Tj 0 g 1 0 0 1 77.475 341.143 Tm (INTERFACES="lo) Tj 0 g 1 0 0 1 176.475 341.143 Tm (eth0) Tj 0 g 1 0 0 1 209.475 341.143 Tm (eth1") Tj 0 g 1 0 0 1 77.475 317.851 Tm (if) Tj 0 g 1 0 0 1 97.275 317.851 Tm ([) Tj 0 g 1 0 0 1 110.475 317.851 Tm ("$1") Tj 0 g 1 0 0 1 143.475 317.851 Tm (=) Tj 0 g 1 0 0 1 156.675 317.851 Tm ("start") Tj 0 g 1 0 0 1 209.475 317.851 Tm (]) Tj 0 g 1 0 0 1 77.475 306.205 Tm (then) Tj 0 g 1 0 0 1 130.275 294.559 Tm (echo) Tj 0 g 1 0 0 1 163.275 294.559 Tm ("Starting) Tj 0 g 1 0 0 1 229.275 294.559 Tm (firewall...") Tj 0 g 1 0 0 1 130.275 282.913 Tm (iptables) Tj 0 g 1 0 0 1 189.675 282.913 Tm (-P) Tj 0 g 1 0 0 1 209.475 282.913 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 282.913 Tm (DROP) Tj 0 g 1 0 0 1 130.275 271.267 Tm (iptables) Tj 0 g 1 0 0 1 189.675 271.267 Tm (-A) Tj 0 g 1 0 0 1 209.475 271.267 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 271.267 Tm (-i) Tj 0 g 1 0 0 1 268.875 271.267 Tm (!) Tj 0 g 1 0 0 1 282.075 271.267 Tm (${UPLINK}) Tj 0 g 1 0 0 1 348.075 271.267 Tm (-j) Tj 0 g 1 0 0 1 367.875 271.267 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 259.621 Tm (iptables) Tj 0 g 1 0 0 1 189.675 259.621 Tm (-A) Tj 0 g 1 0 0 1 209.475 259.621 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 259.621 Tm (-m) Tj 0 g 1 0 0 1 268.875 259.621 Tm (state) Tj 0 g 1 0 0 1 308.475 259.621 Tm (--state) Tj 0 g 1 0 0 1 361.275 259 2000 .621 Tm (ESTABLISHED,RELATED) Tj 0 g 1 0 0 1 493.275 259.621 Tm (-j) Tj 0 g 1 0 0 1 513.075 259.621 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 247.975 Tm (iptables) Tj 0 g 1 0 0 1 189.675 247.975 Tm (-A) Tj 0 g 1 0 0 1 209.475 247.975 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 247.975 Tm (-p) Tj 0 g 1 0 0 1 268.875 247.975 Tm (tcp) Tj 0 g 1 0 0 1 295.275 247.975 Tm (-i) Tj 0 g 1 0 0 1 315.075 247.975 Tm (${UPLINK}) Tj 0 g 1 0 0 1 381.075 247.975 Tm (-j) Tj 0 g 1 0 0 1 400.875 247.975 Tm (REJECT) Tj 0 g 1 0 0 1 447.075 247.975 Tm (--reject-with) Tj 0 g 1 0 0 1 539.475 247.975 Tm (tcp-reset) Tj 0 g 1 0 0 1 130.275 236.329 Tm (iptables) Tj 0 g 1 0 0 1 189.675 236.329 Tm (-A) Tj 0 g 1 0 0 1 209.475 236.329 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 236.329 Tm (-p) Tj 0 g 1 0 0 1 268.875 236.329 Tm (udp) Tj 0 g 1 0 0 1 295.275 236.329 Tm (-i) Tj 0 g 1 0 0 1 315.075 236.329 Tm (${UPLINK}) Tj 0 g 1 0 0 1 381.075 236.329 Tm (-j) Tj 0 g 1 0 0 1 400.875 236.329 Tm (REJECT) Tj 0 g 1 0 0 1 447.075 236.329 Tm (--reject-with) Tj 0 g 1 0 0 1 539.475 236.329 Tm (icmp-port-unreachable) Tj 0 g 1 0 0 1 130.275 213.037 Tm (#explicitly) Tj 0 g 1 0 0 1 209.475 213.037 Tm (disable) Tj 0 g 1 0 0 1 262.275 213.037 Tm (ECN) Tj 0 g 1 0 0 1 130.275 201.391 Tm (if) Tj 0 g 1 0 0 1 150.075 201.391 Tm ([) Tj 0 g 1 0 0 1 163.275 201.391 Tm (-e) Tj 0 g 1 0 0 1 183.075 201.391 Tm (/proc/sys/net/ipv4/tcp_ecn) Tj 0 g 1 0 0 1 361.275 201.391 Tm (]) Tj 0 g 1 0 0 1 130.275 189.745 Tm (then) Tj 0 g 1 0 0 1 183.075 178.099 Tm (echo) Tj 0 g 1 0 0 1 216.075 178.099 Tm (0) Tj 0 g 1 0 0 1 229.275 178.099 Tm (>) Tj 0 g 1 0 0 1 242.475 178.099 Tm (/proc/sys/net/ipv4/tcp_ecn) Tj 0 g 1 0 0 1 130.275 166.453 Tm (fi) Tj 0 g 1 0 0 1 130.275 143.161 Tm (#disable) Tj 0 g 1 0 0 1 189.675 143.161 Tm (spoofing) Tj 0 g 1 0 0 1 249.075 143.161 Tm (on) Tj 0 g 1 0 0 1 268.875 143.161 Tm (all) Tj 0 g 1 0 0 1 295.275 143.161 Tm (interfaces) Tj 0 g 1 0 0 1 130.275 131.515 Tm (for) Tj 0 g 1 0 0 1 156.675 131.515 Tm (x) Tj 0 g 1 0 0 1 169.875 131.515 Tm (in) Tj 0 g 1 0 0 1 189.675 131.515 Tm (${INTERFACES}) Tj 0 g 1 0 0 1 130.275 119.869 Tm (do) Tj 0 g 1 0 0 1 183.075 108.223 Tm (echo) Tj 0 g 1 0 0 1 216.075 108.223 Tm (1) Tj 0 g 1 0 0 1 229.275 108.223 Tm (>) Tj 0 g 1 0 0 1 242.475 108.223 Tm (/proc/sys/net/ipv4/conf/${x}/rp_filter) Tj 0 g 1 0 0 1 130.275 96.577 Tm (done) Tj 0 g 1 0 0 1 130.275 73.285 Tm (if) Tj 0 g 1 0 0 1 150.075 73.285 Tm ([) Tj 0 g 1 0 0 1 163.275 73.285 Tm ("$ROUTER") Tj 0 g 1 0 0 1 229.275 73.285 Tm (=) Tj 0 g 1 0 0 1 242.475 73.285 Tm ("yes") Tj 0 g 1 0 0 1 282.075 73.285 Tm (]) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (15) Tj ET endstream endobj 99 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 98 0 R >> endobj 100 0 obj << /Length 4816 >> stream BT /F9 11 Tf 0 g 1 0 0 1 130.275 762.701 Tm (then) Tj 0 g 1 0 0 1 183.075 751.055 Tm (#we're) Tj 0 g 1 0 0 1 229.275 751.055 Tm (a) Tj 0 g 1 0 0 1 242.475 751.055 Tm (router) Tj 0 g 1 0 0 1 288.675 751.055 Tm (of) Tj 0 g 1 0 0 1 308.475 751.055 Tm (some) Tj 0 g 1 0 0 1 341.475 751.055 Tm (kind,) Tj 0 g 1 0 0 1 381.075 751.055 Tm (enable) Tj 0 g 1 0 0 1 427.275 751.055 Tm (IP) Tj 0 g 1 0 0 1 447.075 751.055 Tm (forwarding) Tj 0 g 1 0 0 1 183.075 739.409 Tm (echo) Tj 0 g 1 0 0 1 216.075 739.409 Tm (1) Tj 0 g 1 0 0 1 229.275 739.409 Tm (>) Tj 0 g 1 0 0 1 242.475 739.409 Tm (/proc/sys/net/ipv4/ip_forward) Tj 0 g 1 0 0 1 183.075 727.763 Tm (if) Tj 0 g 1 0 0 1 202.875 727.763 Tm ([) Tj 0 g 1 0 0 1 216.075 727.763 Tm ("$NAT") Tj 0 g 1 0 0 1 262.275 727.763 Tm (=) Tj 0 g 1 0 0 1 275.475 727.763 Tm ("dynamic") Tj 0 g 1 0 0 1 341.475 727.763 Tm (]) Tj 0 g 1 0 0 1 183.075 716.117 Tm (then) Tj 0 g 1 0 0 1 235.875 704.471 Tm (#dynamic) Tj 0 g 1 0 0 1 295.275 704.471 Tm (IP) Tj 0 g 1 0 0 1 315.075 704.471 Tm (address,) Tj 0 g 1 0 0 1 374.475 704.471 Tm (use) Tj 0 g 1 0 0 1 400.875 704.471 Tm (masquerading) Tj 0 g 1 0 0 1 235.875 692.825 Tm (echo) Tj 0 g 1 0 0 1 268.875 692.825 Tm ("Enabling) Tj 0 g 1 0 0 1 334.875 692.825 Tm (masquerading) Tj 0 g 1 0 0 1 420.675 692.825 Tm (\(dynamic) Tj 0 g 1 0 0 1 480.075 692.825 Tm (ip\)...") Tj 0 g 1 0 0 1 235.875 681.179 Tm (iptables) Tj 0 g 1 0 0 1 295.275 681.179 Tm (-t) Tj 0 g 1 0 0 1 315.075 681.179 Tm (nat) Tj 0 g 1 0 0 1 341.475 681.179 Tm (-A) Tj 0 g 1 0 0 1 361.275 681.179 Tm (POSTROUTING) Tj 0 g 1 0 0 1 440.475 681.179 Tm (-o) Tj 0 g 1 0 0 1 460.275 681.179 Tm (${UPLINK}) Tj 0 g 1 0 0 1 526.275 681.179 Tm (-j) Tj 0 g 1 0 0 1 546.075 681.179 Tm (MASQUERADE) Tj 0 g 1 0 0 1 183.075 669.533 Tm (elif) Tj 0 g 1 0 0 1 216.075 669.533 Tm ([) Tj 0 g 1 0 0 1 229.275 669.533 Tm ("$NAT") Tj 0 g 1 0 0 1 275.475 669.533 Tm (!=) Tj 0 g 1 0 0 1 295.275 669.533 Tm ("") Tj 0 g 1 0 0 1 315.075 669.533 Tm (]) Tj 0 g 1 0 0 1 183.075 657.887 Tm (then) Tj 0 g 1 0 0 1 235.875 646.241 Tm (#static) Tj 0 g 1 0 0 1 288.675 646.241 Tm (IP,) Tj 0 g 1 0 0 1 315.075 646.241 Tm (use) Tj 0 g 1 0 0 1 341.475 646.241 Tm (SNAT) Tj 0 g 1 0 0 1 235.875 634.595 Tm (echo) Tj 0 g 1 0 0 1 268.875 634.595 Tm ("Enabling) Tj 0 g 1 0 0 1 334.875 634.595 Tm (SNAT) Tj 0 g 1 0 0 1 367.875 634.595 Tm (\(static) Tj 0 g 1 0 0 1 420.675 634.595 Tm (ip\)...") Tj 0 g 1 0 0 1 235.875 622.949 Tm (iptables) Tj 0 g 1 0 0 1 295.275 622.949 Tm (-t) Tj 0 g 1 0 0 1 315.075 622.949 Tm (nat) Tj 0 g 1 0 0 1 341.475 622.949 Tm (-A) Tj 0 g 1 0 0 1 361.275 622.949 Tm (POSTROUTING) Tj 0 g 1 0 0 1 440.475 622.949 Tm (-o) Tj 0 g 1 0 0 1 460.275 622.949 Tm (${UPLINK}) Tj 0 g 1 0 0 1 526.275 622.949 Tm (-j) Tj 0 g 1 0 0 1 546.075 622.949 Tm (SNAT) Tj 0 g 1 0 0 1 579.075 622.949 Tm (--to) Tj 0 g 1 0 0 1 612.075 622.949 Tm (${UPIP}) Tj 0 g 1 0 0 1 183.075 611.303 Tm (fi) Tj 0 g 1 0 0 1 130.275 599.657 Tm (fi) Tj 0 g 1 0 0 1 77.475 576.365 Tm (elif) Tj 0 g 1 0 0 1 110.475 576.365 Tm ([) Tj 0 g 1 0 0 1 123.675 576.365 Tm ("$1") Tj 0 g 1 0 0 1 156.675 576.365 Tm (=) Tj 0 g 1 0 0 1 169.875 576.365 Tm ("stop") Tj 0 g 1 0 0 1 216.075 576.365 Tm (]) Tj 0 g 1 0 0 1 77.475 564.719 Tm (then) Tj 0 g 1 0 0 1 130.275 553.073 Tm (echo) Tj 0 g 1 0 0 1 163.275 553.073 Tm ("Stopping) Tj 0 g 1 0 0 1 229.275 553.073 Tm (firewall...") Tj 0 g 1 0 0 1 130.275 541.427 Tm (iptables) Tj 0 g 1 0 0 1 189.675 541.427 Tm (-F) Tj 0 g 1 0 0 1 209.475 541.427 Tm (INPUT) Tj 0 g 1 0 0 1 130.275 529.781 Tm (iptables) Tj 0 g 1 0 0 1 189.675 529.781 Tm (-P) Tj 0 g 1 0 0 1 209.475 529.781 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 529.781 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 518.135 Tm (#turn) Tj 0 g 1 0 0 1 169.875 518.135 Tm (off) Tj 0 g 1 0 0 1 196.275 518.135 Tm (NAT/masquerading,) Tj 0 g 1 0 0 1 315.075 518.135 Tm (if) Tj 0 g 1 0 0 1 334.875 518.135 Tm (any) Tj 0 g 1 0 0 1 130.275 506.489 Tm (iptables) Tj 0 g 1 0 0 1 189.675 506.489 Tm (-t) Tj 0 g 1 0 0 1 209.475 506.489 Tm (nat) Tj 0 g 1 0 0 1 235.875 506.489 Tm (-F) Tj 0 g 1 0 0 1 255.675 506.489 Tm (POSTROUTING) Tj 0 g 1 0 0 1 77.475 494.843 Tm (fi) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 48 2000 5.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (16) Tj ET endstream endobj 101 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 100 0 R >> endobj 102 0 obj << /Length 15541 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (6.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (Stateful) Tj 0 g 1 0 0 1 221.967 756.696 Tm (servers) Tj 0 g 1 0 0 1 70.875 725.046 Tm (Viewing) Tj 0 g 1 0 0 1 138.897 725.046 Tm (rules) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (Before) Tj 0 g 1 0 0 1 106.339 701.422 Tm (we) Tj 0 g 1 0 0 1 123.455 701.422 Tm (start) Tj 0 g 1 0 0 1 147.908 701.422 Tm (making) Tj 0 g 1 0 0 1 186.419 701.422 Tm (customizations) Tj 0 g 1 0 0 1 262.22 701.422 Tm (to) Tj 0 g 1 0 0 1 274.452 701.422 Tm (our) Tj 0 g 1 0 0 1 293.405 701.422 Tm (firewall) Tj 0 g 1 0 0 1 330.684 701.422 Tm (so) Tj 0 g 1 0 0 1 345.358 701.422 Tm (that) Tj 0 g 1 0 0 1 366.764 701.422 Tm (it) Tj 0 g 1 0 0 1 375.322 701.422 Tm (can) Tj 0 g 1 0 0 1 396.112 701.422 Tm (be) Tj 0 g 1 0 0 1 411.402 701.422 Tm (used) Tj 0 g 1 0 0 1 438.308 701.422 Tm (on) Tj 0 g 1 0 0 1 453.598 701.422 Tm (a) Tj 0 g 1 0 0 1 462.772 701.422 Tm (server,) Tj 0 g 1 0 0 1 499.446 701.422 Tm (I) Tj 0 g 1 0 0 1 70.875 688.247 Tm (need) Tj 0 g 1 0 0 1 98.397 688.247 Tm (to) Tj 0 g 1 0 0 1 110.629 688.247 Tm (show) Tj 0 g 1 0 0 1 139.361 688.247 Tm (you) Tj 0 g 1 0 0 1 160.151 688.247 Tm (how) Tj 0 g 1 0 0 1 183.383 688.247 Tm (to) Tj 0 g 1 0 0 1 195.615 688.247 Tm (list) Tj 0 g 1 0 0 1 212.115 688.247 Tm (your) Tj 0 g 1 0 0 1 236.568 688.247 Tm (currently) Tj 0 g 1 0 0 1 281.8 688.247 Tm (active) Tj 0 g 1 0 0 1 313.59 688.247 Tm (firewall) Tj 0 g 1 0 0 1 350.869 688.247 Tm (rules.) Tj 0 g 1 0 0 1 380.822 688.247 Tm (To) Tj 0 g 1 0 0 1 396.717 688.247 Tm (view) Tj 0 g 1 0 0 1 421.775 688.247 Tm (the) Tj 0 g 1 0 0 1 440.123 688.247 Tm (rules) Tj 0 g 1 0 0 1 467.018 688.247 Tm (in) Tj 0 g 1 0 0 1 478.634 688.247 Tm (the) Tj 0 g 1 0 0 1 496.982 688.247 Tm (filter) Tj 0 g 1 0 0 1 70.875 675.072 Tm (table's) Tj 0 g 1 0 0 1 105.382 675.072 Tm (INPUT) Tj 0 g 1 0 0 1 141.44 675.072 Tm (chain,) Tj 0 g 1 0 0 1 173.846 675.072 Tm (type:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 648.876 Tm (#) Tj 0 g 1 0 0 1 90.675 648.876 Tm (iptables) Tj 0 g 1 0 0 1 150.075 648.876 Tm (-v) Tj 0 g 1 0 0 1 169.875 648.876 Tm (-L) Tj 0 g 1 0 0 1 189.675 648.876 Tm (INPUT) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 610.605 Tm (The) Tj 0 g 1 0 0 1 92.886 610.605 Tm (-v) Tj 0 g 1 0 0 1 107.868 610.605 Tm (option) Tj 0 g 1 0 0 1 140.89 610.605 Tm (gives) Tj 0 g 1 0 0 1 169.622 610.605 Tm (us) Tj 0 g 1 0 0 1 184.296 610.605 Tm (a) Tj 0 g 1 0 0 1 193.47 610.605 Tm (verbose) Tj 0 g 1 0 0 1 235.655 610.605 Tm (output,) Tj 0 g 1 0 0 1 272.351 610.605 Tm (so) Tj 0 g 1 0 0 1 287.025 610.605 Tm (that) Tj 0 g 1 0 0 1 308.431 610.605 Tm (we) Tj 0 g 1 0 0 1 325.547 610.605 Tm (can) Tj 0 g 1 0 0 1 346.337 610.605 Tm (see) Tj 0 g 1 0 0 1 367.127 610.605 Tm (the) Tj 0 g 1 0 0 1 385.475 610.605 Tm (total) Tj 0 g 1 0 0 1 409.323 610.605 Tm (packets) Tj 0 g 1 0 0 1 450.287 610.605 Tm (and) Tj 0 g 1 0 0 1 471.693 610.605 Tm (bytes) Tj 0 g 1 0 0 1 70.875 597.43 Tm (transferred) Tj 0 g 1 0 0 1 127.118 597.43 Tm (per) Tj 0 g 1 0 0 1 146.071 597.43 Tm (rule.) Tj 0 g 1 0 0 1 170.524 597.43 Tm (We) Tj 0 g 1 0 0 1 190.082 597.43 Tm (can) Tj 0 g 1 0 0 1 210.872 597.43 Tm (also) Tj 0 g 1 0 0 1 234.104 597.43 Tm (look) Tj 0 g 1 0 0 1 257.336 597.43 Tm (at) Tj 0 g 1 0 0 1 269.568 597.43 Tm (our) Tj 0 g 1 0 0 1 288.521 597.43 Tm (nat) Tj 0 g 1 0 0 1 306.869 597.43 Tm (POSTROUTING) Tj 0 g 1 0 0 1 390.601 597.43 Tm (table) Tj 0 g 1 0 0 1 417.507 597.43 Tm (with) Tj 0 g 1 0 0 1 440.123 597.43 Tm (the) Tj 0 g 1 0 0 1 458.471 597.43 Tm (following) Tj 0 g 1 0 0 1 70.875 584.255 Tm (command:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 558.059 Tm (#) Tj 0 g 1 0 0 1 90.675 558.059 Tm (iptables) Tj 0 g 1 0 0 1 150.075 558.059 Tm (-t) Tj 0 g 1 0 0 1 169.875 558.059 Tm (nat) Tj 0 g 1 0 0 1 196.275 558.059 Tm (-v) Tj 0 g 1 0 0 1 216.075 558.059 Tm (-L) Tj 0 g 1 0 0 1 235.875 558.059 Tm (POSTROUTING) Tj 0 g 1 0 0 1 77.475 546.413 Tm (Chain) Tj 0 g 1 0 0 1 117.075 546.413 Tm (POSTROUTING) Tj 0 g 1 0 0 1 196.275 546.413 Tm (\(policy) Tj 0 g 1 0 0 1 249.075 546.413 Tm (ACCEPT) Tj 0 g 1 0 0 1 295.275 546.413 Tm (399) Tj 0 g 1 0 0 1 321.675 546.413 Tm (packets,) Tj 0 g 1 0 0 1 381.075 546.413 Tm (48418) Tj 0 g 1 0 0 1 420.675 546.413 Tm (bytes\)) Tj 0 g 1 0 0 1 84.075 534.767 Tm (pkts) Tj 0 g 1 0 0 1 117.075 534.767 Tm (bytes) Tj 0 g 1 0 0 1 156.675 534.767 Tm (target) Tj 0 g 1 0 0 1 229.275 534.767 Tm (prot) Tj 0 g 1 0 0 1 262.275 534.767 Tm (opt) Tj 0 g 1 0 0 1 288.675 534.767 Tm (in) Tj 0 g 1 0 0 1 334.875 534.767 Tm (out) Tj 0 g 1 0 0 1 387.675 534.767 Tm (source) Tj 0 g 1 0 0 1 526.275 534.767 Tm (destination) Tj 0 g 1 0 0 1 84.075 523.121 Tm (2728) Tj 0 g 1 0 0 1 123.675 523.121 Tm (170K) Tj 0 g 1 0 0 1 156.675 523.121 Tm (SNAT) Tj 0 g 1 0 0 1 229.275 523.121 Tm (all) Tj 0 g 1 0 0 1 262.275 523.121 Tm (--) Tj 0 g 1 0 0 1 288.675 523.121 Tm (any) Tj 0 g 1 0 0 1 334.875 523.121 Tm (eth1) Tj 0 g 1 0 0 1 387.675 523.121 Tm (anywhere) Tj 0 g 1 0 0 1 526.275 523.121 Tm (anywhere) Tj 0 g 1 0 0 1 651.675 523.121 Tm (to:215.218.215.2) Tj ET q 0 G 70.875 491.248 m 524.475 491.248 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 461.824 Tm (Getting) Tj 0 g 1 0 0 1 133.911 461.824 Tm (ready) Tj 0 g 1 0 0 1 183.933 461.824 Tm (for) Tj 0 g 1 0 0 1 209.943 461.824 Tm (service) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 438.2 Tm (Right) Tj 0 g 1 0 0 1 99.607 438.2 Tm (now,) Tj 0 g 1 0 0 1 125.897 438.2 Tm (our) Tj 0 g 1 0 0 1 144.85 438.2 Tm (firewall) Tj 0 g 1 0 0 1 182.129 438.2 Tm (doesn't) Tj 0 g 1 0 0 1 220.31 438.2 Tm (allow) Tj 0 g 1 0 0 1 248.426 438.2 Tm (the) Tj 0 g 1 0 0 1 266.774 438.2 Tm (general) Tj 0 g 1 0 0 1 306.517 438.2 Tm (public) Tj 0 g 1 0 0 1 338.307 438.2 Tm (to) Tj 0 g 1 0 0 1 350.539 438.2 Tm (connect) Tj 0 g 1 0 0 1 392.119 438.2 Tm (to) Tj 0 g 1 0 0 1 404.351 438.2 Tm (services) Tj 0 g 1 0 0 1 447.746 438.2 Tm (on) Tj 0 g 1 0 0 1 463.036 438.2 Tm (our) Tj 0 g 1 0 0 1 481.989 438.2 Tm (machine) Tj 0 g 1 0 0 1 70.875 425.025 Tm (because) Tj 0 g 1 0 0 1 115.513 425.025 Tm (it) Tj 0 g 1 0 0 1 124.071 425.025 Tm (only) Tj 0 g 1 0 0 1 147.303 425.025 Tm (accepts) Tj 0 g 1 0 0 1 188.267 425.025 Tm (incoming) Tj 0 g 1 0 0 1 235.336 425.025 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 314.195 425.025 Tm (or) Tj 0 g 1 0 0 1 327.032 425.025 Tm (RELATED) Tj 0 g 1 0 0 1 380.822 425.025 Tm (packets.) Tj 0 g 1 0 0 1 424.844 425.025 Tm (Because) Tj 0 g 1 0 0 1 470.703 425.025 Tm (it) Tj 0 g 1 0 0 1 479.261 425.025 Tm (drops) Tj 0 g 1 0 0 1 70.875 411.85 Tm (any) Tj 0 g 1 0 0 1 91.665 411.85 Tm (incoming) Tj 0 g 1 0 0 1 138.734 411.85 Tm (NEW) Tj 0 g 1 0 0 1 167.455 411.85 Tm (packets,) Tj 0 g 1 0 0 1 211.477 411.85 Tm (any) Tj 0 g 1 0 0 1 232.267 411.85 Tm (connection) Tj 0 g 1 0 0 1 288.521 411.85 Tm (attempt) Tj 0 g 1 0 0 1 328.264 411.85 Tm (is) Tj 0 g 1 0 0 1 339.264 411.85 Tm (rejected) Tj 0 g 1 0 0 1 381.449 411.85 Tm (unconditionally.) Tj 0 g 1 0 0 1 460.319 411.85 Tm (However,) Tj 0 g 1 0 0 1 509.83 411.85 Tm (by) Tj 0 g 1 0 0 1 70.875 398.675 Tm (selectively) Tj 0 g 1 0 0 1 124.665 398.675 Tm (allowing) Tj 0 g 1 0 0 1 167.455 398.675 Tm (some) Tj 0 g 1 0 0 1 197.408 398.675 Tm (incoming) Tj 0 g 1 0 0 1 244.477 398.675 Tm (traffic) Tj 0 g 1 0 0 1 274.43 398.675 Tm (to) Tj 0 g 1 0 0 1 286.662 398.675 Tm (cross) Tj 0 g 1 0 0 1 315.999 398.675 Tm (our) Tj 0 g 1 0 0 1 334.952 398.675 Tm (firewall,) Tj 0 g 1 0 0 1 375.289 398.675 Tm (we) Tj 0 g 1 0 0 1 392.405 398.675 Tm (can) Tj 0 g 1 0 0 1 413.195 398.675 Tm (allow) Tj 0 g 1 0 0 1 441.311 398.675 Tm (the) Tj 0 g 1 0 0 1 459.659 398.675 Tm (general) Tj 0 g 1 0 0 1 70.875 385.5 Tm (public) Tj 0 g 1 0 0 1 102.665 385.5 Tm (to) Tj 0 g 1 0 0 1 114.897 385.5 Tm (connect) Tj 0 g 1 0 0 1 156.477 385.5 Tm (to) Tj 0 g 1 0 0 1 168.709 385.5 Tm (the) Tj 0 g 1 0 0 1 187.057 385.5 Tm (services) Tj 0 g 1 0 0 1 230.452 385.5 Tm (that) Tj 0 g 1 0 0 1 251.858 385.5 Tm (we) Tj 0 g 1 0 0 1 268.974 385.5 Tm (specify.) Tj ET q 0 G 70.875 364.723 m 524.475 364.723 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 335.299 T 2000 m (Stateful) Tj 0 g 1 0 0 1 136.917 335.299 Tm (HTTP) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 311.675 Tm (While) Tj 0 g 1 0 0 1 101.433 311.675 Tm (we) Tj 0 g 1 0 0 1 118.549 311.675 Tm (want) Tj 0 g 1 0 0 1 144.839 311.675 Tm (to) Tj 0 g 1 0 0 1 157.071 311.675 Tm (accept) Tj /F2 11 Tf 0 g 1 0 0 1 192.535 311.675 Tm (some) Tj /F1 11 Tf 0 g 1 0 0 1 222.488 311.675 Tm (incoming) Tj 0 g 1 0 0 1 269.557 311.675 Tm (connections,) Tj 0 g 1 0 0 1 334.369 311.675 Tm (we) Tj 0 g 1 0 0 1 351.485 311.675 Tm (probably) Tj 0 g 1 0 0 1 396.728 311.675 Tm (don't) Tj 0 g 1 0 0 1 423.293 311.675 Tm (want) Tj 0 g 1 0 0 1 449.583 311.675 Tm (to) Tj 0 g 1 0 0 1 461.815 311.675 Tm (accept) Tj 0 g 1 0 0 1 497.279 311.675 Tm (every) Tj 0 g 1 0 0 1 70.875 298.5 Tm (kind) Tj 0 g 1 0 0 1 94.107 298.5 Tm (of) Tj 0 g 1 0 0 1 106.339 298.5 Tm (incoming) Tj 0 g 1 0 0 1 153.408 298.5 Tm (connection.) Tj 0 g 1 0 0 1 212.72 298.5 Tm (It) Tj 0 g 1 0 0 1 221.894 298.5 Tm (makes) Tj 0 g 1 0 0 1 257.347 298.5 Tm (sense) Tj 0 g 1 0 0 1 289.753 298.5 Tm (to) Tj 0 g 1 0 0 1 301.985 298.5 Tm (start) Tj 0 g 1 0 0 1 326.438 298.5 Tm (with) Tj 0 g 1 0 0 1 349.054 298.5 Tm (a) Tj 0 g 1 0 0 1 358.228 298.5 Tm ("deny) Tj 0 g 1 0 0 1 389.039 298.5 Tm (by) Tj 0 g 1 0 0 1 403.713 298.5 Tm (default") Tj 0 g 1 0 0 1 443.698 298.5 Tm (policy) Tj 0 g 1 0 0 1 474.872 298.5 Tm (\(as) Tj 0 g 1 0 0 1 493.209 298.5 Tm (we) Tj 0 g 1 0 0 1 70.875 285.325 Tm (have) Tj 0 g 1 0 0 1 97.781 285.325 Tm (now\)) Tj 0 g 1 0 0 1 124.676 285.325 Tm (and) Tj 0 g 1 0 0 1 146.082 285.325 Tm (begin) Tj 0 g 1 0 0 1 176.046 285.325 Tm (opening) Tj 0 g 1 0 0 1 218.242 285.325 Tm (up) Tj 0 g 1 0 0 1 233.532 285.325 Tm (access) Tj 0 g 1 0 0 1 270.822 285.325 Tm (to) Tj 0 g 1 0 0 1 283.054 285.325 Tm (those) Tj 0 g 1 0 0 1 313.018 285.325 Tm (services) Tj 0 g 1 0 0 1 356.413 285.325 Tm (that) Tj 0 g 1 0 0 1 377.819 285.325 Tm (we'd) Tj 0 g 1 0 0 1 403.152 285.325 Tm (like) Tj 0 g 1 0 0 1 422.71 285.325 Tm (people) Tj 0 g 1 0 0 1 458.79 285.325 Tm (to) Tj 0 g 1 0 0 1 471.022 285.325 Tm (be) Tj 0 g 1 0 0 1 486.312 285.325 Tm (able) Tj 0 g 1 0 0 1 510.16 285.325 Tm (to) Tj 0 g 1 0 0 1 70.875 272.15 Tm (connect) Tj 0 g 1 0 0 1 112.455 272.15 Tm (to.) Tj 0 g 1 0 0 1 127.745 272.15 Tm (For) Tj 0 g 1 0 0 1 147.303 272.15 Tm (example,) Tj 0 g 1 0 0 1 194.988 272.15 Tm (if) Tj 0 g 1 0 0 1 203.546 272.15 Tm (we're) Tj 0 g 1 0 0 1 232.542 272.15 Tm (running) Tj 0 g 1 0 0 1 272.285 272.15 Tm (a) Tj 0 g 1 0 0 1 281.459 272.15 Tm (Web) Tj 0 g 1 0 0 1 307.133 272.15 Tm (server,) Tj 0 g 1 0 0 1 343.807 272.15 Tm (we'll) Tj 0 g 1 0 0 1 367.908 272.15 Tm (allow) Tj 0 g 1 0 0 1 396.024 272.15 Tm (NEW) Tj 0 g 1 0 0 1 424.745 272.15 Tm (packets) Tj 0 g 1 0 0 1 465.709 272.15 Tm (into) Tj 0 g 1 0 0 1 486.499 272.15 Tm (our) Tj 0 g 1 0 0 1 70.875 258.975 Tm (machine,) Tj 0 g 1 0 0 1 118.56 258.975 Tm (as) Tj 0 g 1 0 0 1 133.234 258.975 Tm (long) Tj 0 g 1 0 0 1 157.082 258.975 Tm (as) Tj 0 g 1 0 0 1 171.756 258.975 Tm (they) Tj 0 g 1 0 0 1 195.604 258.975 Tm (are) Tj 0 g 1 0 0 1 214.557 258.975 Tm (headed) Tj 0 g 1 0 0 1 254.311 258.975 Tm (for) Tj 0 g 1 0 0 1 270.206 258.975 Tm (port) Tj 0 g 1 0 0 1 292.217 258.975 Tm (80) Tj 0 g 1 0 0 1 307.507 258.975 Tm (\(HTTP\).) Tj 0 g 1 0 0 1 349.67 258.975 Tm (That's) Tj 0 g 1 0 0 1 382.34 258.975 Tm (all) Tj 0 g 1 0 0 1 396.398 258.975 Tm (we) Tj 0 g 1 0 0 1 413.514 258.975 Tm (need) Tj 0 g 1 0 0 1 441.036 258.975 Tm (to) Tj 0 g 1 0 0 1 453.268 258.975 Tm (do.) Tj 0 g 1 0 0 1 471.616 258.975 Tm (Once) Tj 0 g 1 0 0 1 500.964 258.975 Tm (we) Tj 0 g 1 0 0 1 70.875 245.8 Tm (allow) Tj 0 g 1 0 0 1 98.991 245.8 Tm (the) Tj 0 g 1 0 0 1 117.339 245.8 Tm (NEW) Tj 0 g 1 0 0 1 146.06 245.8 Tm (packets) Tj 0 g 1 0 0 1 187.024 245.8 Tm (in,) Tj 0 g 1 0 0 1 201.698 245.8 Tm (we've) Tj 0 g 1 0 0 1 232.531 245.8 Tm (allowed) Tj 0 g 1 0 0 1 272.879 245.8 Tm (a) Tj 0 g 1 0 0 1 282.053 245.8 Tm (connection) Tj 0 g 1 0 0 1 338.307 245.8 Tm (to) Tj 0 g 1 0 0 1 350.539 245.8 Tm (be) Tj 0 g 1 0 0 1 365.829 245.8 Tm (established.) Tj 0 g 1 0 0 1 427.583 245.8 Tm (Once) Tj 0 g 1 0 0 1 456.931 245.8 Tm (the) Tj 0 g 1 0 0 1 70.875 232.625 Tm (connection) Tj 0 g 1 0 0 1 127.129 232.625 Tm (is) Tj 0 g 1 0 0 1 138.129 232.625 Tm (established,) Tj 0 g 1 0 0 1 199.883 232.625 Tm (our) Tj 0 g 1 0 0 1 218.836 232.625 Tm (existing) Tj 0 g 1 0 0 1 259.184 232.625 Tm (rule) Tj 0 g 1 0 0 1 280.579 232.625 Tm (allowing) Tj 0 g 1 0 0 1 323.369 232.625 Tm (incoming) Tj 0 g 1 0 0 1 370.438 232.625 Tm (ESTABLISHED) Tj 0 g 1 0 0 1 449.297 232.625 Tm (and) Tj 0 g 1 0 0 1 470.703 232.625 Tm (RELATED) Tj 0 g 1 0 0 1 70.875 219.45 Tm (packets) Tj 0 g 1 0 0 1 111.839 219.45 Tm (kicks) Tj 0 g 1 0 0 1 139.339 219.45 Tm (in,) Tj 0 g 1 0 0 1 154.013 219.45 Tm (allowing) Tj 0 g 1 0 0 1 196.803 219.45 Tm (the) Tj 0 g 1 0 0 1 215.151 219.45 Tm (HTTP) Tj 0 g 1 0 0 1 246.93 219.45 Tm (connection) Tj 0 g 1 0 0 1 303.184 219.45 Tm (to) Tj 0 g 1 0 0 1 315.416 219.45 Tm (proceed) Tj 0 g 1 0 0 1 358.217 219.45 Tm (unhindered.) Tj ET q 0 G 70.875 198.673 m 524.475 198.673 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 169.249 Tm (Stateful) Tj 0 g 1 0 0 1 136.917 169.249 Tm (HTTP) Tj 0 g 1 0 0 1 188.919 169.249 Tm (example) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 145.625 Tm (Let's) Tj 0 g 1 0 0 1 96.824 145.625 Tm (take) Tj 0 g 1 0 0 1 120.672 145.625 Tm (a) Tj 0 g 1 0 0 1 129.846 145.625 Tm (look) Tj 0 g 1 0 0 1 153.078 145.625 Tm (at) Tj 0 g 1 0 0 1 165.31 145.625 Tm (the) Tj 0 g 1 0 0 1 183.658 145.625 Tm ("heart") Tj 0 g 1 0 0 1 219.595 145.625 Tm (of) Tj 0 g 1 0 0 1 231.827 145.625 Tm (our) Tj 0 g 1 0 0 1 250.78 145.625 Tm (firewall) Tj 0 g 1 0 0 1 288.059 145.625 Tm (and) Tj 0 g 1 0 0 1 309.465 145.625 Tm (the) Tj 0 g 1 0 0 1 327.813 145.625 Tm (new) Tj 0 g 1 0 0 1 351.045 145.625 Tm (rule) Tj 0 g 1 0 0 1 372.44 145.625 Tm (that) Tj 0 g 1 0 0 1 393.846 145.625 Tm (allows) Tj 0 g 1 0 0 1 427.462 145.625 Tm (incoming) Tj 0 g 1 0 0 1 474.531 145.625 Tm (HTTP) Tj 0 g 1 0 0 1 70.875 132.45 Tm (connections:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 106.254 Tm (iptables) Tj 0 g 1 0 0 1 136.875 106.254 Tm (-P) Tj 0 g 1 0 0 1 156.675 106.254 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 106.254 Tm (DROP) Tj 0 g 1 0 0 1 77.475 94.608 Tm (iptables) Tj 0 g 1 0 0 1 136.875 94.608 Tm (-A) Tj 0 g 1 0 0 1 156.675 94.608 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 94.608 Tm (-i) Tj 0 g 1 0 0 1 216.075 94.608 Tm (!) Tj 0 g 1 0 0 1 229.275 94.608 Tm (${UPLINK}) Tj 0 g 1 0 0 1 295.275 94.608 Tm (-j) Tj 0 g 1 0 0 1 315.075 94.608 Tm (ACCEPT) Tj 0 g 1 0 0 1 77.475 82.962 Tm (iptables) Tj 0 g 1 0 0 1 136.875 82.962 Tm (-A) Tj 0 g 1 0 0 1 156.675 82.962 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 82.962 Tm (-m) Tj 0 g 1 0 0 1 216.075 82.962 Tm (state) Tj 0 g 1 0 0 1 255.675 82.962 Tm (--state) Tj 0 g 1 0 0 1 308.475 82.962 Tm (ESTABLISHED,RELATED) Tj 0 g 1 0 0 1 440.475 82.962 Tm (-j) Tj 0 g 1 0 0 1 460.275 82.962 Tm (ACCEPT) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (17) Tj ET endstream endobj 103 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 102 0 R >> endobj 104 0 obj << /Length 14164 >> stream BT /F9 11 Tf 0 g 1 0 0 1 77.475 762.701 Tm (#our) Tj 0 g 1 0 0 1 110.475 762.701 Tm (new) Tj 0 g 1 0 0 1 136.875 762.701 Tm (rule) Tj 0 g 1 0 0 1 169.875 762.701 Tm (follows) Tj 0 g 1 0 0 1 77.475 751.055 Tm (iptables) Tj 0 g 1 0 0 1 136.875 751.055 Tm (-A) Tj 0 g 1 0 0 1 156.675 751.055 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 751.055 Tm (-p) Tj 0 g 1 0 0 1 216.075 751.055 Tm (tcp) Tj 0 g 1 0 0 1 242.475 751.055 Tm (--dport) Tj 0 g 1 0 0 1 295.275 751 2000 .055 Tm (http) Tj 0 g 1 0 0 1 328.275 751.055 Tm (-m) Tj 0 g 1 0 0 1 348.075 751.055 Tm (state) Tj 0 g 1 0 0 1 387.675 751.055 Tm (--state) Tj 0 g 1 0 0 1 440.475 751.055 Tm (NEW) Tj 0 g 1 0 0 1 466.875 751.055 Tm (-j) Tj 0 g 1 0 0 1 486.675 751.055 Tm (ACCEPT) Tj 0 g 1 0 0 1 77.475 739.409 Tm (iptables) Tj 0 g 1 0 0 1 136.875 739.409 Tm (-A) Tj 0 g 1 0 0 1 156.675 739.409 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 739.409 Tm (-p) Tj 0 g 1 0 0 1 216.075 739.409 Tm (tcp) Tj 0 g 1 0 0 1 242.475 739.409 Tm (-i) Tj 0 g 1 0 0 1 262.275 739.409 Tm (${UPLINK}) Tj 0 g 1 0 0 1 328.275 739.409 Tm (-j) Tj 0 g 1 0 0 1 348.075 739.409 Tm (REJECT) Tj 0 g 1 0 0 1 394.275 739.409 Tm (--reject-with) Tj 0 g 1 0 0 1 486.675 739.409 Tm (tcp-reset) Tj 0 g 1 0 0 1 77.475 727.763 Tm (iptables) Tj 0 g 1 0 0 1 136.875 727.763 Tm (-A) Tj 0 g 1 0 0 1 156.675 727.763 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 727.763 Tm (-p) Tj 0 g 1 0 0 1 216.075 727.763 Tm (udp) Tj 0 g 1 0 0 1 242.475 727.763 Tm (-i) Tj 0 g 1 0 0 1 262.275 727.763 Tm (${UPLINK}) Tj 0 g 1 0 0 1 328.275 727.763 Tm (-j) Tj 0 g 1 0 0 1 348.075 727.763 Tm (REJECT) Tj 0 g 1 0 0 1 394.275 727.763 Tm (--reject-with) Tj 0 g 1 0 0 1 486.675 727.763 Tm (icmp-port-unreachable) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 689.492 Tm (This) Tj 0 g 1 0 0 1 94.712 689.492 Tm (new) Tj 0 g 1 0 0 1 117.944 689.492 Tm (rule) Tj 0 g 1 0 0 1 139.339 689.492 Tm (allows) Tj 0 g 1 0 0 1 172.955 689.492 Tm (incoming) Tj 0 g 1 0 0 1 220.024 689.492 Tm (NEW) Tj 0 g 1 0 0 1 248.745 689.492 Tm (TCP) Tj 0 g 1 0 0 1 273.803 689.492 Tm (packets) Tj 0 g 1 0 0 1 314.767 689.492 Tm (destined) Tj 0 g 1 0 0 1 359.405 689.492 Tm (for) Tj 0 g 1 0 0 1 375.3 689.492 Tm (our) Tj 0 g 1 0 0 1 394.253 689.492 Tm (machine's) Tj 0 g 1 0 0 1 446.481 689.492 Tm (port) Tj 0 g 1 0 0 1 468.492 689.492 Tm (80) Tj 0 g 1 0 0 1 483.782 689.492 Tm (\(http\)) Tj 0 g 1 0 0 1 512.514 689.492 Tm (to) Tj 0 g 1 0 0 1 70.875 676.317 Tm (come) Tj 0 g 1 0 0 1 100.828 676.317 Tm (in.) Tj 0 g 1 0 0 1 115.502 676.317 Tm (Notice) Tj 0 g 1 0 0 1 149.734 676.317 Tm (the) Tj 0 g 1 0 0 1 168.082 676.317 Tm (placement) Tj 0 g 1 0 0 1 221.883 676.317 Tm (of) Tj 0 g 1 0 0 1 234.115 676.317 Tm (this) Tj 0 g 1 0 0 1 254.289 676.317 Tm (rule.) Tj 0 g 1 0 0 1 278.742 676.317 Tm (It's) Tj 0 g 1 0 0 1 295.517 676.317 Tm (important) Tj 0 g 1 0 0 1 344.423 676.317 Tm (that) Tj 0 g 1 0 0 1 365.829 676.317 Tm (it) Tj 0 g 1 0 0 1 374.387 676.317 Tm (appears) Tj 0 g 1 0 0 1 417.188 676.317 Tm (before) Tj 0 g 1 0 0 1 451.431 676.317 Tm (our) Tj 0 g 1 0 0 1 470.384 676.317 Tm (REJECT) Tj 0 g 1 0 0 1 70.875 663.142 Tm (rules.) Tj 0 g 1 0 0 1 100.828 663.142 Tm (Since) Tj 0 g 1 0 0 1 131.397 663.142 Tm (iptables) Tj 0 g 1 0 0 1 172.361 663.142 Tm (will) Tj 0 g 1 0 0 1 190.687 663.142 Tm (apply) Tj 0 g 1 0 0 1 220.035 663.142 Tm (the) Tj 0 g 1 0 0 1 238.383 663.142 Tm (first) Tj 0 g 1 0 0 1 259.162 663.142 Tm (matching) Tj 0 g 1 0 0 1 306.847 663.142 Tm (rule,) Tj 0 g 1 0 0 1 331.3 663.142 Tm (putting) Tj 0 g 1 0 0 1 367.38 663.142 Tm (it) Tj 0 g 1 0 0 1 375.938 663.142 Tm (after) Tj 0 g 1 0 0 1 401.007 663.142 Tm (our) Tj 0 g 1 0 0 1 419.96 663.142 Tm (REJECT) Tj 0 g 1 0 0 1 465.797 663.142 Tm (lines) Tj 0 g 1 0 0 1 491.471 663.142 Tm (would) Tj 0 g 1 0 0 1 70.875 649.967 Tm (cause) Tj 0 g 1 0 0 1 103.281 649.967 Tm (this) Tj 0 g 1 0 0 1 123.455 649.967 Tm (rule) Tj 0 g 1 0 0 1 144.85 649.967 Tm (to) Tj 0 g 1 0 0 1 157.082 649.967 Tm (have) Tj 0 g 1 0 0 1 183.988 649.967 Tm (no) Tj 0 g 1 0 0 1 199.278 649.967 Tm (effect.) Tj ET q 0 G 70.875 629.19 m 524.475 629.19 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 599.766 Tm (Our) Tj 0 g 1 0 0 1 105.885 599.766 Tm (final) Tj 0 g 1 0 0 1 143.901 599.766 Tm (firewall) Tj 0 g 1 0 0 1 204.903 599.766 Tm (script) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 576.142 Tm (Now,) Tj 0 g 1 0 0 1 98.991 576.142 Tm (let's) Tj 0 g 1 0 0 1 121.266 576.142 Tm (take) Tj 0 g 1 0 0 1 145.114 576.142 Tm (a) Tj 0 g 1 0 0 1 154.288 576.142 Tm (look) Tj 0 g 1 0 0 1 177.52 576.142 Tm (at) Tj 0 g 1 0 0 1 189.752 576.142 Tm (our) Tj 0 g 1 0 0 1 208.705 576.142 Tm (final) Tj 0 g 1 0 0 1 231.937 576.142 Tm (firewall) Tj 0 g 1 0 0 1 269.216 576.142 Tm (script,) Tj 0 g 1 0 0 1 301.611 576.142 Tm (one) Tj 0 g 1 0 0 1 323.017 576.142 Tm (that) Tj 0 g 1 0 0 1 344.423 576.142 Tm (can) Tj 0 g 1 0 0 1 365.213 576.142 Tm (be) Tj 0 g 1 0 0 1 380.503 576.142 Tm (used) Tj 0 g 1 0 0 1 407.409 576.142 Tm (on) Tj 0 g 1 0 0 1 422.699 576.142 Tm (a) Tj 0 g 1 0 0 1 431.873 576.142 Tm (laptop,) Tj 0 g 1 0 0 1 70.875 562.967 Tm (workstation,) Tj 0 g 1 0 0 1 132.618 562.967 Tm (router,) Tj 0 g 1 0 0 1 167.466 562.967 Tm (or) Tj 0 g 1 0 0 1 180.303 562.967 Tm (server) Tj 0 g 1 0 0 1 213.919 562.967 Tm (\(or) Tj 0 g 1 0 0 1 230.419 562.967 Tm (some) Tj 0 g 1 0 0 1 260.372 562.967 Tm (combination) Tj 0 g 1 0 0 1 322.731 562.967 Tm (thereof!\).) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 536.771 Tm (#!/bin/bash) Tj 0 g 1 0 0 1 77.475 513.479 Tm (#Our) Tj 0 g 1 0 0 1 110.475 513.479 Tm (complete) Tj 0 g 1 0 0 1 169.875 513.479 Tm (stateful) Tj 0 g 1 0 0 1 229.275 513.479 Tm (firewall) Tj 0 g 1 0 0 1 288.675 513.479 Tm (script.) Tj 0 g 1 0 0 1 348.075 513.479 Tm (This) Tj 0 g 1 0 0 1 381.075 513.479 Tm (firewall) Tj 0 g 1 0 0 1 440.475 513.479 Tm (can) Tj 0 g 1 0 0 1 466.875 513.479 Tm (be) Tj 0 g 1 0 0 1 486.675 513.479 Tm (customized) Tj 0 g 1 0 0 1 559.275 513.479 Tm (for) Tj 0 g 1 0 0 1 77.475 501.833 Tm (#a) Tj 0 g 1 0 0 1 97.275 501.833 Tm (laptop,) Tj 0 g 1 0 0 1 150.075 501.833 Tm (workstation,) Tj 0 g 1 0 0 1 235.875 501.833 Tm (router) Tj 0 g 1 0 0 1 282.075 501.833 Tm (or) Tj 0 g 1 0 0 1 301.875 501.833 Tm (even) Tj 0 g 1 0 0 1 334.875 501.833 Tm (a) Tj 0 g 1 0 0 1 348.075 501.833 Tm (server.) Tj 0 g 1 0 0 1 400.875 501.833 Tm (:\)) Tj 0 g 1 0 0 1 77.475 478.541 Tm (#change) Tj 0 g 1 0 0 1 130.275 478.541 Tm (this) Tj 0 g 1 0 0 1 163.275 478.541 Tm (to) Tj 0 g 1 0 0 1 183.075 478.541 Tm (the) Tj 0 g 1 0 0 1 209.475 478.541 Tm (name) Tj 0 g 1 0 0 1 242.475 478.541 Tm (of) Tj 0 g 1 0 0 1 262.275 478.541 Tm (the) Tj 0 g 1 0 0 1 288.675 478.541 Tm (interface) Tj 0 g 1 0 0 1 354.675 478.541 Tm (that) Tj 0 g 1 0 0 1 387.675 478.541 Tm (provides) Tj 0 g 1 0 0 1 447.075 478.541 Tm (your) Tj 0 g 1 0 0 1 480.075 478.541 Tm ("uplink") Tj 0 g 1 0 0 1 77.475 466.895 Tm (#\(connection) Tj 0 g 1 0 0 1 163.275 466.895 Tm (to) Tj 0 g 1 0 0 1 183.075 466.895 Tm (the) Tj 0 g 1 0 0 1 209.475 466.895 Tm (Internet\)) Tj 0 g 1 0 0 1 77.475 443.603 Tm (UPLINK="eth1") Tj 0 g 1 0 0 1 77.475 420.311 Tm (#if) Tj 0 g 1 0 0 1 103.875 420.311 Tm (you're) Tj 0 g 1 0 0 1 150.075 420.311 Tm (a) Tj 0 g 1 0 0 1 163.275 420.311 Tm (router) Tj 0 g 1 0 0 1 209.475 420.311 Tm (\(and) Tj 0 g 1 0 0 1 242.475 420.311 Tm (thus) Tj 0 g 1 0 0 1 275.475 420.311 Tm (should) Tj 0 g 1 0 0 1 321.675 420.311 Tm (forward) Tj 0 g 1 0 0 1 374.475 420.311 Tm (IP) Tj 0 g 1 0 0 1 394.275 420.311 Tm (packets) Tj 0 g 1 0 0 1 447.075 420.311 Tm (between) Tj 0 g 1 0 0 1 499.875 420.311 Tm (interfaces\),) Tj 0 g 1 0 0 1 77.475 408.665 Tm (#you) Tj 0 g 1 0 0 1 110.475 408.665 Tm (want) Tj 0 g 1 0 0 1 143.475 408.665 Tm (ROUTER="yes";) Tj 0 g 1 0 0 1 235.875 408.665 Tm (otherwise,) Tj 0 g 1 0 0 1 308.475 408.665 Tm (ROUTER="no") Tj 0 g 1 0 0 1 77.475 385.373 Tm (ROUTER="yes") Tj 0 g 1 0 0 1 77.475 362.081 Tm (#change) Tj 0 g 1 0 0 1 130.275 362.081 Tm (this) Tj 0 g 1 0 0 1 163.275 362.081 Tm (next) Tj 0 g 1 0 0 1 196.275 362.081 Tm (line) Tj 0 g 1 0 0 1 229.275 362.081 Tm (to) Tj 0 g 1 0 0 1 249.075 362.081 Tm (the) Tj 0 g 1 0 0 1 275.475 362.081 Tm (static) Tj 0 g 1 0 0 1 321.675 362.081 Tm (IP) Tj 0 g 1 0 0 1 341.475 362.081 Tm (of) Tj 0 g 1 0 0 1 361.275 362.081 Tm (your) Tj 0 g 1 0 0 1 394.275 362.081 Tm (uplink) Tj 0 g 1 0 0 1 440.475 362.081 Tm (interface) Tj 0 g 1 0 0 1 506.475 362.081 Tm (for) Tj 0 g 1 0 0 1 532.875 362.081 Tm (static) Tj 0 g 1 0 0 1 579.075 362.081 Tm (SNAT,) Tj 0 g 1 0 0 1 618.675 362.081 Tm (or) Tj 0 g 1 0 0 1 77.475 350.435 Tm (#"dynamic") Tj 0 g 1 0 0 1 150.075 350.435 Tm (if) Tj 0 g 1 0 0 1 169.875 350.435 Tm (you) Tj 0 g 1 0 0 1 196.275 350.435 Tm (have) Tj 0 g 1 0 0 1 229.275 350.435 Tm (a) Tj 0 g 1 0 0 1 242.475 350.435 Tm (dynamic) Tj 0 g 1 0 0 1 295.275 350.435 Tm (IP.) 2000 Tj 0 g 1 0 0 1 328.275 350.435 Tm (If) Tj 0 g 1 0 0 1 348.075 350.435 Tm (you) Tj 0 g 1 0 0 1 374.475 350.435 Tm (don't) Tj 0 g 1 0 0 1 414.075 350.435 Tm (need) Tj 0 g 1 0 0 1 447.075 350.435 Tm (any) Tj 0 g 1 0 0 1 473.475 350.435 Tm (NAT,) Tj 0 g 1 0 0 1 506.475 350.435 Tm (set) Tj 0 g 1 0 0 1 532.875 350.435 Tm (NAT) Tj 0 g 1 0 0 1 559.275 350.435 Tm (to) Tj 0 g 1 0 0 1 579.075 350.435 Tm ("") Tj 0 g 1 0 0 1 598.875 350.435 Tm (to) Tj 0 g 1 0 0 1 77.475 338.789 Tm (#disable) Tj 0 g 1 0 0 1 136.875 338.789 Tm (it.) Tj 0 g 1 0 0 1 77.475 315.497 Tm (NAT="1.2.3.4") Tj 0 g 1 0 0 1 77.475 292.205 Tm (#change) Tj 0 g 1 0 0 1 130.275 292.205 Tm (this) Tj 0 g 1 0 0 1 163.275 292.205 Tm (next) Tj 0 g 1 0 0 1 196.275 292.205 Tm (line) Tj 0 g 1 0 0 1 229.275 292.205 Tm (so) Tj 0 g 1 0 0 1 249.075 292.205 Tm (it) Tj 0 g 1 0 0 1 268.875 292.205 Tm (lists) Tj 0 g 1 0 0 1 308.475 292.205 Tm (all) Tj 0 g 1 0 0 1 334.875 292.205 Tm (your) Tj 0 g 1 0 0 1 367.875 292.205 Tm (network) Tj 0 g 1 0 0 1 420.675 292.205 Tm (interfaces,) Tj 0 g 1 0 0 1 499.875 292.205 Tm (including) Tj 0 g 1 0 0 1 565.875 292.205 Tm (lo) Tj 0 g 1 0 0 1 77.475 268.913 Tm (INTERFACES="lo) Tj 0 g 1 0 0 1 176.475 268.913 Tm (eth0) Tj 0 g 1 0 0 1 209.475 268.913 Tm (eth1") Tj 0 g 1 0 0 1 77.475 245.621 Tm (#change) Tj 0 g 1 0 0 1 130.275 245.621 Tm (this) Tj 0 g 1 0 0 1 163.275 245.621 Tm (line) Tj 0 g 1 0 0 1 196.275 245.621 Tm (so) Tj 0 g 1 0 0 1 216.075 245.621 Tm (that) Tj 0 g 1 0 0 1 249.075 245.621 Tm (it) Tj 0 g 1 0 0 1 268.875 245.621 Tm (lists) Tj 0 g 1 0 0 1 308.475 245.621 Tm (the) Tj 0 g 1 0 0 1 334.875 245.621 Tm (assigned) Tj 0 g 1 0 0 1 394.275 245.621 Tm (numbers) Tj 0 g 1 0 0 1 447.075 245.621 Tm (or) Tj 0 g 1 0 0 1 466.875 245.621 Tm (symbolic) Tj 0 g 1 0 0 1 526.275 245.621 Tm (names) Tj 0 g 1 0 0 1 565.875 245.621 Tm (\(from) Tj 0 g 1 0 0 1 77.475 233.975 Tm (#/etc/services\)) Tj 0 g 1 0 0 1 183.075 233.975 Tm (of) Tj 0 g 1 0 0 1 202.875 233.975 Tm (all) Tj 0 g 1 0 0 1 229.275 233.975 Tm (the) Tj 0 g 1 0 0 1 255.675 233.975 Tm (services) Tj 0 g 1 0 0 1 315.075 233.975 Tm (that) Tj 0 g 1 0 0 1 348.075 233.975 Tm (you'd) Tj 0 g 1 0 0 1 387.675 233.975 Tm (like) Tj 0 g 1 0 0 1 420.675 233.975 Tm (to) Tj 0 g 1 0 0 1 440.475 233.975 Tm (provide) Tj 0 g 1 0 0 1 493.275 233.975 Tm (to) Tj 0 g 1 0 0 1 513.075 233.975 Tm (the) Tj 0 g 1 0 0 1 539.475 233.975 Tm (general) Tj 0 g 1 0 0 1 77.475 222.329 Tm (#public.) Tj 0 g 1 0 0 1 143.475 222.329 Tm (If) Tj 0 g 1 0 0 1 163.275 222.329 Tm (you) Tj 0 g 1 0 0 1 189.675 222.329 Tm (don't) Tj 0 g 1 0 0 1 229.275 222.329 Tm (want) Tj 0 g 1 0 0 1 262.275 222.329 Tm (any) Tj 0 g 1 0 0 1 288.675 222.329 Tm (services) Tj 0 g 1 0 0 1 348.075 222.329 Tm (enabled,) Tj 0 g 1 0 0 1 407.475 222.329 Tm (set) Tj 0 g 1 0 0 1 433.875 222.329 Tm (it) Tj 0 g 1 0 0 1 453.675 222.329 Tm (to) Tj 0 g 1 0 0 1 473.475 222.329 Tm ("") Tj 0 g 1 0 0 1 77.475 199.037 Tm (SERVICES="http) Tj 0 g 1 0 0 1 176.475 199.037 Tm (ftp) Tj 0 g 1 0 0 1 202.875 199.037 Tm (smtp) Tj 0 g 1 0 0 1 235.875 199.037 Tm (ssh) Tj 0 g 1 0 0 1 262.275 199.037 Tm (rsync") Tj 0 g 1 0 0 1 77.475 175.745 Tm (if) Tj 0 g 1 0 0 1 97.275 175.745 Tm ([) Tj 0 g 1 0 0 1 110.475 175.745 Tm ("$1") Tj 0 g 1 0 0 1 143.475 175.745 Tm (=) Tj 0 g 1 0 0 1 156.675 175.745 Tm ("start") Tj 0 g 1 0 0 1 209.475 175.745 Tm (]) Tj 0 g 1 0 0 1 77.475 164.099 Tm (then) Tj 0 g 1 0 0 1 130.275 152.453 Tm (echo) Tj 0 g 1 0 0 1 163.275 152.453 Tm ("Starting) Tj 0 g 1 0 0 1 229.275 152.453 Tm (firewall...") Tj 0 g 1 0 0 1 130.275 140.807 Tm (iptables) Tj 0 g 1 0 0 1 189.675 140.807 Tm (-P) Tj 0 g 1 0 0 1 209.475 140.807 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 140.807 Tm (DROP) Tj 0 g 1 0 0 1 130.275 129.161 Tm (iptables) Tj 0 g 1 0 0 1 189.675 129.161 Tm (-A) Tj 0 g 1 0 0 1 209.475 129.161 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 129.161 Tm (-i) Tj 0 g 1 0 0 1 268.875 129.161 Tm (!) Tj 0 g 1 0 0 1 282.075 129.161 Tm (${UPLINK}) Tj 0 g 1 0 0 1 348.075 129.161 Tm (-j) Tj 0 g 1 0 0 1 367.875 129.161 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 117.515 Tm (iptables) Tj 0 g 1 0 0 1 189.675 117.515 Tm (-A) Tj 0 g 1 0 0 1 209.475 117.515 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 117.515 Tm (-m) Tj 0 g 1 0 0 1 268.875 117.515 Tm (state) Tj 0 g 1 0 0 1 308.475 117.515 Tm (--state) Tj 0 g 1 0 0 1 361.275 117.515 Tm (ESTABLISHED,RELATED) Tj 0 g 1 0 0 1 493.275 117.515 Tm (-j) Tj 0 g 1 0 0 1 513.075 117.515 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 94.223 Tm (#enable) Tj 0 g 1 0 0 1 183.075 94.223 Tm (public) Tj 0 g 1 0 0 1 229.275 94.223 Tm (access) Tj 0 g 1 0 0 1 275.475 94.223 Tm (to) Tj 0 g 1 0 0 1 295.275 94.223 Tm (certain) Tj 0 g 1 0 0 1 348.075 94.223 Tm (services) Tj 0 g 1 0 0 1 130.275 82.577 Tm (for) Tj 0 g 1 0 0 1 156.675 82.577 Tm (x) Tj 0 g 1 0 0 1 169.875 82.577 Tm (in) Tj 0 g 1 0 0 1 189.675 82.577 Tm (${SERVICES}) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (18) Tj ET endstream endobj 105 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 104 0 R >> endobj 106 0 obj << /Length 7886 >> stream BT /F9 11 Tf 0 g 1 0 0 1 130.275 762.701 Tm (do) Tj 0 g 1 0 0 1 183.075 751.055 Tm (iptables) Tj 0 g 1 0 0 1 242.475 751.055 Tm (-A) Tj 0 g 1 0 0 1 262.275 751.055 Tm (INPUT) Tj 0 g 1 0 0 1 301.875 751.055 Tm (-p) Tj 0 g 1 0 0 1 321.675 751.055 Tm (tcp) Tj 0 g 1 0 0 1 348.075 751.055 Tm (--dport) Tj 0 g 1 0 0 1 400.875 751.055 Tm (${x}) Tj 0 g 1 0 0 1 433.875 751.055 Tm (-m) Tj 0 g 1 0 0 1 453.675 751.055 Tm (state) Tj 0 g 1 0 0 1 493.275 751.055 Tm (--state) Tj 0 g 1 0 0 1 546.075 751.055 Tm (NEW) Tj 0 g 1 0 0 1 572.475 751.055 Tm (-j) Tj 0 g 1 0 0 1 592.275 751.055 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 739.409 Tm (done) Tj 0 g 1 0 0 1 130.275 716.117 Tm (iptables) Tj 0 g 1 0 0 1 189.675 716.117 Tm (-A) Tj 0 g 1 0 0 1 209.475 716.117 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 716.117 Tm (-p) Tj 0 g 1 0 0 1 268.875 716.117 Tm (tcp) Tj 0 g 1 0 0 1 295.275 716.117 Tm (-i) Tj 0 g 1 0 0 1 315.075 716.117 Tm (${UPLINK}) Tj 0 g 1 0 0 1 381.075 716.117 Tm (-j) Tj 0 g 1 0 0 1 400.875 716.117 Tm (REJECT) Tj 0 g 1 0 0 1 447.075 716.117 Tm (--reject-with) Tj 0 g 1 0 0 1 539.475 716.117 Tm (tcp-reset) Tj 0 g 1 0 0 1 130.275 704.471 Tm (iptables) Tj 0 g 1 0 0 1 189.675 704.471 Tm (-A) Tj 0 g 1 0 0 1 209.475 704.471 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 704.471 Tm (-p) Tj 0 g 1 0 0 1 268.875 704.471 Tm (udp) Tj 0 g 1 0 0 1 295.275 704.471 Tm (-i) Tj 0 g 1 0 0 1 315.075 704.471 Tm (${UPLINK}) Tj 0 g 1 0 0 1 381.075 704.471 Tm (-j) Tj 0 g 1 0 0 1 400.875 704.471 Tm (REJECT) Tj 0 g 1 0 0 1 447.075 704.471 Tm (--reject-with) Tj 0 g 1 0 0 1 539.475 704.471 Tm (icmp-port-unreachable) Tj 0 g 1 0 0 1 130.275 681.179 Tm (#explicitly) Tj 0 g 1 0 0 1 209.475 681.179 Tm (disable) Tj 0 g 1 0 0 1 262.275 681.179 Tm (ECN) Tj 0 g 1 0 0 1 130.275 669.533 Tm (if) Tj 0 g 1 0 0 1 150.075 669.533 Tm ([) Tj 0 g 1 0 0 1 163.275 669.533 Tm (-e) Tj 0 g 1 0 0 1 183.075 669.533 Tm (/proc/sys/net/ipv4/tcp_ecn) Tj 0 g 1 0 0 1 361.275 669.533 Tm (]) Tj 0 g 1 0 0 1 130.275 657.887 Tm (then) Tj 0 g 1 0 0 1 183.075 646.241 Tm (echo) Tj 0 g 1 0 0 1 216.075 646.241 Tm (0) Tj 0 g 1 0 0 1 229.275 646.241 Tm (>) Tj 0 g 1 0 0 1 242.475 646.241 Tm (/proc/sys/net/ipv4/tcp_ecn) Tj 0 g 1 0 0 1 130.275 634.595 Tm (fi) Tj 0 g 1 0 0 1 130.275 611.303 Tm (#disable) Tj 0 g 1 0 0 1 189.675 611.303 Tm (spoofing) Tj 0 g 1 0 0 1 249.075 611.303 Tm (on) Tj 0 g 1 0 0 1 268.875 611.303 Tm (all) Tj 0 g 1 0 0 1 295.275 611.303 Tm (interfaces) Tj 0 g 1 0 0 1 130.275 599.657 Tm (for) Tj 0 g 1 0 0 1 156.675 599.657 Tm (x) Tj 0 g 1 0 0 1 169.875 599.6 2000 57 Tm (in) Tj 0 g 1 0 0 1 189.675 599.657 Tm (${INTERFACES}) Tj 0 g 1 0 0 1 130.275 588.011 Tm (do) Tj 0 g 1 0 0 1 183.075 576.365 Tm (echo) Tj 0 g 1 0 0 1 216.075 576.365 Tm (1) Tj 0 g 1 0 0 1 229.275 576.365 Tm (>) Tj 0 g 1 0 0 1 242.475 576.365 Tm (/proc/sys/net/ipv4/conf/${x}/rp_filter) Tj 0 g 1 0 0 1 130.275 564.719 Tm (done) Tj 0 g 1 0 0 1 130.275 541.427 Tm (if) Tj 0 g 1 0 0 1 150.075 541.427 Tm ([) Tj 0 g 1 0 0 1 163.275 541.427 Tm ("$ROUTER") Tj 0 g 1 0 0 1 229.275 541.427 Tm (=) Tj 0 g 1 0 0 1 242.475 541.427 Tm ("yes") Tj 0 g 1 0 0 1 282.075 541.427 Tm (]) Tj 0 g 1 0 0 1 130.275 529.781 Tm (then) Tj 0 g 1 0 0 1 183.075 518.135 Tm (#we're) Tj 0 g 1 0 0 1 229.275 518.135 Tm (a) Tj 0 g 1 0 0 1 242.475 518.135 Tm (router) Tj 0 g 1 0 0 1 288.675 518.135 Tm (of) Tj 0 g 1 0 0 1 308.475 518.135 Tm (some) Tj 0 g 1 0 0 1 341.475 518.135 Tm (kind,) Tj 0 g 1 0 0 1 381.075 518.135 Tm (enable) Tj 0 g 1 0 0 1 427.275 518.135 Tm (IP) Tj 0 g 1 0 0 1 447.075 518.135 Tm (forwarding) Tj 0 g 1 0 0 1 183.075 506.489 Tm (echo) Tj 0 g 1 0 0 1 216.075 506.489 Tm (1) Tj 0 g 1 0 0 1 229.275 506.489 Tm (>) Tj 0 g 1 0 0 1 242.475 506.489 Tm (/proc/sys/net/ipv4/ip_forward) Tj 0 g 1 0 0 1 183.075 494.843 Tm (if) Tj 0 g 1 0 0 1 202.875 494.843 Tm ([) Tj 0 g 1 0 0 1 216.075 494.843 Tm ("$NAT") Tj 0 g 1 0 0 1 262.275 494.843 Tm (=) Tj 0 g 1 0 0 1 275.475 494.843 Tm ("dynamic") Tj 0 g 1 0 0 1 341.475 494.843 Tm (]) Tj 0 g 1 0 0 1 183.075 483.197 Tm (then) Tj 0 g 1 0 0 1 235.875 471.551 Tm (#dynamic) Tj 0 g 1 0 0 1 295.275 471.551 Tm (IP) Tj 0 g 1 0 0 1 315.075 471.551 Tm (address,) Tj 0 g 1 0 0 1 374.475 471.551 Tm (use) Tj 0 g 1 0 0 1 400.875 471.551 Tm (masquerading) Tj 0 g 1 0 0 1 235.875 459.905 Tm (echo) Tj 0 g 1 0 0 1 268.875 459.905 Tm ("Enabling) Tj 0 g 1 0 0 1 334.875 459.905 Tm (masquerading) Tj 0 g 1 0 0 1 420.675 459.905 Tm (\(dynamic) Tj 0 g 1 0 0 1 480.075 459.905 Tm (ip\)...") Tj 0 g 1 0 0 1 235.875 448.259 Tm (iptables) Tj 0 g 1 0 0 1 295.275 448.259 Tm (-t) Tj 0 g 1 0 0 1 315.075 448.259 Tm (nat) Tj 0 g 1 0 0 1 341.475 448.259 Tm (-A) Tj 0 g 1 0 0 1 361.275 448.259 Tm (POSTROUTING) Tj 0 g 1 0 0 1 440.475 448.259 Tm (-o) Tj 0 g 1 0 0 1 460.275 448.259 Tm (${UPLINK}) Tj 0 g 1 0 0 1 526.275 448.259 Tm (-j) Tj 0 g 1 0 0 1 546.075 448.259 Tm (MASQUERADE) Tj 0 g 1 0 0 1 183.075 436.613 Tm (elif) Tj 0 g 1 0 0 1 216.075 436.613 Tm ([) Tj 0 g 1 0 0 1 229.275 436.613 Tm ("$NAT") Tj 0 g 1 0 0 1 275.475 436.613 Tm (!=) Tj 0 g 1 0 0 1 295.275 436.613 Tm ("") Tj 0 g 1 0 0 1 315.075 436.613 Tm (]) Tj 0 g 1 0 0 1 183.075 424.967 Tm (then) Tj 0 g 1 0 0 1 235.875 413.321 Tm (#static) Tj 0 g 1 0 0 1 288.675 413.321 Tm (IP,) Tj 0 g 1 0 0 1 315.075 413.321 Tm (use) Tj 0 g 1 0 0 1 341.475 413.321 Tm (SNAT) Tj 0 g 1 0 0 1 235.875 401.675 Tm (echo) Tj 0 g 1 0 0 1 268.875 401.675 Tm ("Enabling) Tj 0 g 1 0 0 1 334.875 401.675 Tm (SNAT) Tj 0 g 1 0 0 1 367.875 401.675 Tm (\(static) Tj 0 g 1 0 0 1 420.675 401.675 Tm (ip\)...") Tj 0 g 1 0 0 1 235.875 390.029 Tm (iptables) Tj 0 g 1 0 0 1 295.275 390.029 Tm (-t) Tj 0 g 1 0 0 1 315.075 390.029 Tm (nat) Tj 0 g 1 0 0 1 341.475 390.029 Tm (-A) Tj 0 g 1 0 0 1 361.275 390.029 Tm (POSTROUTING) Tj 0 g 1 0 0 1 440.475 390.029 Tm (-o) Tj 0 g 1 0 0 1 460.275 390.029 Tm (${UPLINK}) Tj 0 g 1 0 0 1 526.275 390.029 Tm (-j) Tj 0 g 1 0 0 1 546.075 390.029 Tm (SNAT) Tj 0 g 1 0 0 1 579.075 390.029 Tm (--to) Tj 0 g 1 0 0 1 612.075 390.029 Tm (${UPIP}) Tj 0 g 1 0 0 1 183.075 378.383 Tm (fi) Tj 0 g 1 0 0 1 130.275 366.737 Tm (fi) Tj 0 g 1 0 0 1 77.475 343.445 Tm (elif) Tj 0 g 1 0 0 1 110.475 343.445 Tm ([) Tj 0 g 1 0 0 1 123.675 343.445 Tm ("$1") Tj 0 g 1 0 0 1 156.675 343.445 Tm (=) Tj 0 g 1 0 0 1 169.875 343.445 Tm ("stop") Tj 0 g 1 0 0 1 216.075 343.445 Tm (]) Tj 0 g 1 0 0 1 77.475 331.799 Tm (then) Tj 0 g 1 0 0 1 130.275 320.153 Tm (echo) Tj 0 g 1 0 0 1 163.275 320.153 Tm ("Stopping) Tj 0 g 1 0 0 1 229.275 320.153 Tm (firewall...") Tj 0 g 1 0 0 1 130.275 308.507 Tm (iptables) Tj 0 g 1 0 0 1 189.675 308.507 Tm (-F) Tj 0 g 1 0 0 1 209.475 308.507 Tm (INPUT) Tj 0 g 1 0 0 1 130.275 296.861 Tm (iptables) Tj 0 g 1 0 0 1 189.675 296.861 Tm (-P) Tj 0 g 1 0 0 1 209.475 296.861 Tm (INPUT) Tj 0 g 1 0 0 1 249.075 296.861 Tm (ACCEPT) Tj 0 g 1 0 0 1 130.275 285.215 Tm (#turn) Tj 0 g 1 0 0 1 169.875 285.215 Tm (off) Tj 0 g 1 0 0 1 196.275 285.215 Tm (NAT/masquerading,) Tj 0 g 1 0 0 1 315.075 285.215 Tm (if) Tj 0 g 1 0 0 1 334.875 285.215 Tm (any) Tj 0 g 1 0 0 1 130.275 273.569 Tm (iptables) Tj 0 g 1 0 0 1 189.675 273.569 Tm (-t) Tj 0 g 1 0 0 1 209.475 273.569 Tm (nat) Tj 0 g 1 0 0 1 235.875 273.569 Tm (-F) Tj 0 g 1 0 0 1 255.675 273.569 Tm (POSTROUTING) Tj 0 g 1 0 0 1 77.475 261.923 Tm (fi) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (19) Tj ET endstream endobj 107 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 106 0 R >> endobj 108 0 obj << /Length 16003 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (7.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (Building) Tj 0 g 1 0 0 1 224.955 756.696 Tm (a) Tj 0 g 1 0 0 1 239.967 756.696 Tm (better) Tj 0 g 1 0 0 1 290.997 756.696 Tm (server) Tj 0 g 1 0 0 1 346.005 756.696 Tm (firewall) Tj 0 g 1 0 0 1 70.875 725.046 Tm (Server) Tj 0 g 1 0 0 1 128.889 725.046 Tm (improvements) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (It's) Tj 0 g 1 0 0 1 87.65 701.422 Tm (often) Tj 0 g 1 0 0 1 115.172 701.422 Tm (possible) Tj 0 g 1 0 0 1 158.578 701.422 Tm (to) Tj 0 g 1 0 0 1 170.81 701.422 Tm (make) Tj 0 g 1 0 0 1 200.763 701.422 Tm (a) Tj 0 g 1 0 0 1 209.937 701.422 Tm (firewall) Tj 0 g 1 0 0 1 247.216 701.422 Tm (just) Tj 0 g 1 0 0 1 267.39 701.422 Tm (an) Tj 0 g 1 0 0 1 282.68 701.422 Tm (eensy) Tj 0 g 1 0 0 1 315.086 701.422 Tm (bit) Tj 0 g 1 0 0 1 329.76 701.422 Tm ("better".) Tj 0 g 1 0 0 1 371.813 701.422 Tm (Of) Tj 0 g 1 0 0 1 386.487 701.422 Tm (course,) Tj 0 g 1 0 0 1 425.614 701.422 Tm (what) Tj 0 g 1 0 0 1 451.904 701.422 Tm ("better") Tj 0 g 1 0 0 1 490.899 701.422 Tm (means) Tj 0 g 1 0 0 1 70.875 688.247 Tm (depends) Tj 0 g 1 0 0 1 116.129 688.247 Tm (on) Tj 0 g 1 0 0 1 131.419 688.247 Tm (your) Tj 0 g 1 0 0 1 155.872 688.247 Tm (specific) Tj 0 g 1 0 0 1 195.604 688.247 Tm (needs.) Tj 0 g 1 0 0 1 231.684 688.247 Tm (Our) Tj 0 g 1 0 0 1 253.079 688.247 Tm (existing) Tj 0 g 1 0 0 1 293.427 688.247 Tm (script) Tj 0 g 1 0 0 1 322.764 688.247 Tm (could) Tj 0 g 1 0 0 1 352.112 688.247 Tm (meet) Tj 0 g 1 0 0 1 379.623 688.247 Tm (yours) Tj 0 g 1 0 0 1 409.576 688.247 Tm (exactly,) Tj 0 g 1 0 0 1 449.924 688.247 Tm (or) Tj 0 g 1 0 0 1 462.761 688.247 Tm (maybe) Tj 0 g 1 0 0 1 70.875 675.072 Tm (some) Tj 0 g 1 0 0 1 100.828 675.072 Tm (additional) Tj 0 g 1 0 0 1 150.966 675.072 Tm (tweaking) Tj 0 g 1 0 0 1 197.43 675.072 Tm (is) Tj 0 g 1 0 0 1 208.43 675.072 Tm (in) Tj 0 g 1 0 0 1 220.046 675.072 Tm (order.) Tj 0 g 1 0 0 1 251.836 675.072 Tm (This) Tj 0 g 1 0 0 1 275.673 675.072 Tm (section) Tj 0 g 1 0 0 1 313.579 675.072 Tm (is) Tj 0 g 1 0 0 1 324.579 675.072 Tm (intended) Tj 0 g 1 0 0 1 369.833 675.072 Tm (to) Tj 0 g 1 0 0 1 382.065 675.072 Tm (serve) Tj 0 g 1 0 0 1 412.018 675.072 Tm (as) Tj 0 g 1 0 0 1 426.692 675.072 Tm (a) Tj 0 g 1 0 0 1 435.866 675.072 Tm (cookbook) Tj 0 g 1 0 0 1 486.004 675.072 Tm (of) Tj 0 g 1 0 0 1 70.875 661.897 Tm (ideas,) Tj 0 g 1 0 0 1 103.281 661.897 Tm (demonstrating) Tj 0 g 1 0 0 1 176.035 661.897 Tm (ways) Tj 0 g 1 0 0 1 204.151 661.897 Tm (to) Tj 0 g 1 0 0 1 216.383 661.897 Tm (enhance) Tj 0 g 1 0 0 1 261.637 661.897 Tm (your) Tj 0 g 1 0 0 1 286.09 661.897 2000 Tm (existing) Tj 0 g 1 0 0 1 326.438 661.897 Tm (stateful) Tj 0 g 1 0 0 1 364.96 661.897 Tm (firewall.) Tj ET q 0 G 70.875 641.12 m 524.475 641.12 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 611.696 Tm (Logging) Tj 0 g 1 0 0 1 139.923 611.696 Tm (techniques) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 588.072 Tm (So) Tj 0 g 1 0 0 1 87.386 588.072 Tm (far,) Tj 0 g 1 0 0 1 106.339 588.072 Tm (we) Tj 0 g 1 0 0 1 123.455 588.072 Tm (haven't) Tj 0 g 1 0 0 1 161.636 588.072 Tm (discussed) Tj 0 g 1 0 0 1 213.6 588.072 Tm (how) Tj 0 g 1 0 0 1 236.832 588.072 Tm (to) Tj 0 g 1 0 0 1 249.064 588.072 Tm (go) Tj 0 g 1 0 0 1 264.354 588.072 Tm (about) Tj 0 g 1 0 0 1 294.934 588.072 Tm (logging) Tj 0 g 1 0 0 1 333.456 588.072 Tm (anything.) Tj 0 g 1 0 0 1 381.152 588.072 Tm (There's) Tj 0 g 1 0 0 1 420.543 588.072 Tm (a) Tj 0 g 1 0 0 1 429.717 588.072 Tm (special) Tj 0 g 1 0 0 1 467.007 588.072 Tm (target) Tj 0 g 1 0 0 1 70.875 574.897 Tm (called) Tj 0 g 1 0 0 1 102.665 574.897 Tm (LOG) Tj 0 g 1 0 0 1 128.955 574.897 Tm (that) Tj 0 g 1 0 0 1 150.361 574.897 Tm (you) Tj 0 g 1 0 0 1 171.151 574.897 Tm (can) Tj 0 g 1 0 0 1 191.941 574.897 Tm (use) Tj 0 g 1 0 0 1 212.731 574.897 Tm (to) Tj 0 g 1 0 0 1 224.963 574.897 Tm (log) Tj 0 g 1 0 0 1 242.695 574.897 Tm (things.) Tj 0 g 1 0 0 1 278.159 574.897 Tm (Along) Tj 0 g 1 0 0 1 309.344 574.897 Tm (with) Tj 0 g 1 0 0 1 331.96 574.897 Tm (LOG,) Tj 0 g 1 0 0 1 361.308 574.897 Tm (there's) Tj 0 g 1 0 0 1 397.036 574.897 Tm (a) Tj 0 g 1 0 0 1 406.21 574.897 Tm (special) Tj 0 g 1 0 0 1 443.5 574.897 Tm (option) Tj 0 g 1 0 0 1 476.522 574.897 Tm (called) Tj 0 g 1 0 0 1 70.875 561.722 Tm ("--log-prefix") Tj 0 g 1 0 0 1 142.584 561.722 Tm (that) Tj 0 g 1 0 0 1 163.99 561.722 Tm (allows) Tj 0 g 1 0 0 1 197.606 561.722 Tm (you) Tj 0 g 1 0 0 1 218.396 561.722 Tm (to) Tj 0 g 1 0 0 1 230.628 561.722 Tm (specify) Tj 0 g 1 0 0 1 267.918 561.722 Tm (some) Tj 0 g 1 0 0 1 297.871 561.722 Tm (text) Tj 0 g 1 0 0 1 318.661 561.722 Tm (that) Tj 0 g 1 0 0 1 340.067 561.722 Tm (will) Tj 0 g 1 0 0 1 358.393 561.722 Tm (appear) Tj 0 g 1 0 0 1 395.694 561.722 Tm (alongside) Tj 0 g 1 0 0 1 445.832 561.722 Tm (the) Tj 0 g 1 0 0 1 464.18 561.722 Tm (packet) Tj 0 g 1 0 0 1 70.875 548.547 Tm (dump) Tj 0 g 1 0 0 1 101.444 548.547 Tm (in) Tj 0 g 1 0 0 1 113.06 548.547 Tm (the) Tj 0 g 1 0 0 1 131.408 548.547 Tm (system) Tj 0 g 1 0 0 1 169.303 548.547 Tm (logs.) Tj 0 g 1 0 0 1 195.593 548.547 Tm (Here's) Tj 0 g 1 0 0 1 230.089 548.547 Tm (an) Tj 0 g 1 0 0 1 245.379 548.547 Tm (example) Tj 0 g 1 0 0 1 290.006 548.547 Tm (log) Tj 0 g 1 0 0 1 307.738 548.547 Tm (rule:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 522.351 Tm (iptables) Tj 0 g 1 0 0 1 136.875 522.351 Tm (-A) Tj 0 g 1 0 0 1 156.675 522.351 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 522.351 Tm (-j) Tj 0 g 1 0 0 1 216.075 522.351 Tm (LOG) Tj 0 g 1 0 0 1 242.475 522.351 Tm (--log-prefix) Tj 0 g 1 0 0 1 328.275 522.351 Tm ("bad) Tj 0 g 1 0 0 1 361.275 522.351 Tm (input:") Tj /F1 11 Tf 0 g 1 0 0 1 70.875 484.08 Tm (You) Tj 0 g 1 0 0 1 93.502 484.08 Tm (wouldn't) Tj 0 g 1 0 0 1 136.567 484.08 Tm (want) Tj 0 g 1 0 0 1 162.857 484.08 Tm (to) Tj 0 g 1 0 0 1 175.089 484.08 Tm (add) Tj 0 g 1 0 0 1 196.495 484.08 Tm (this) Tj 0 g 1 0 0 1 216.669 484.08 Tm (as) Tj 0 g 1 0 0 1 231.343 484.08 Tm (the) Tj 0 g 1 0 0 1 249.691 484.08 Tm (first) Tj 0 g 1 0 0 1 270.47 484.08 Tm (rule) Tj 0 g 1 0 0 1 291.865 484.08 Tm (in) Tj 0 g 1 0 0 1 303.481 484.08 Tm (your) Tj 0 g 1 0 0 1 327.934 484.08 Tm (INPUT) Tj 0 g 1 0 0 1 363.992 484.08 Tm (chain,) Tj 0 g 1 0 0 1 396.398 484.08 Tm (as) Tj 0 g 1 0 0 1 411.072 484.08 Tm (it) Tj 0 g 1 0 0 1 419.63 484.08 Tm (would) Tj 0 g 1 0 0 1 451.42 484.08 Tm (cause) Tj 0 g 1 0 0 1 483.826 484.08 Tm (a) Tj 0 g 1 0 0 1 493.0 484.08 Tm (log) Tj 0 g 1 0 0 1 70.875 470.905 Tm (entry) Tj 0 g 1 0 0 1 98.386 470.905 Tm (to) Tj 0 g 1 0 0 1 110.618 470.905 Tm (be) Tj 0 g 1 0 0 1 125.908 470.905 Tm (recorded) Tj 0 g 1 0 0 1 172.372 470.905 Tm (for) Tj 0 g 1 0 0 1 188.267 470.905 Tm (every) Tj 0 g 1 0 0 1 218.22 470.905 Tm (packet) Tj 0 g 1 0 0 1 253.684 470.905 Tm (that) Tj 0 g 1 0 0 1 275.09 470.905 Tm (you) Tj 0 g 1 0 0 1 295.88 470.905 Tm (receive!) Tj 0 g 1 0 0 1 337.449 470.905 Tm (Instead,) Tj 0 g 1 0 0 1 379.645 470.905 Tm (place) Tj 0 g 1 0 0 1 408.993 470.905 Tm (log) Tj 0 g 1 0 0 1 426.725 470.905 Tm (rules) Tj 0 g 1 0 0 1 453.62 470.905 Tm (further) Tj 0 g 1 0 0 1 488.468 470.905 Tm (down) Tj 0 g 1 0 0 1 70.875 457.73 Tm (in) Tj 0 g 1 0 0 1 82.491 457.73 Tm (your) Tj 0 g 1 0 0 1 106.944 457.73 Tm (INPUT) Tj 0 g 1 0 0 1 143.002 457.73 Tm (chain) Tj 0 g 1 0 0 1 172.35 457.73 Tm (with) Tj 0 g 1 0 0 1 194.966 457.73 Tm (the) Tj 0 g 1 0 0 1 213.314 457.73 Tm (intention) Tj 0 g 1 0 0 1 257.952 457.73 Tm (of) Tj 0 g 1 0 0 1 270.184 457.73 Tm (logging) Tj 0 g 1 0 0 1 308.706 457.73 Tm (strange) Tj 0 g 1 0 0 1 348.449 457.73 Tm (packets) Tj 0 g 1 0 0 1 389.413 457.73 Tm (and) Tj 0 g 1 0 0 1 410.819 457.73 Tm (other) Tj 0 g 1 0 0 1 438.946 457.73 Tm (anomalies.) Tj ET q 0 G 70.875 436.953 m 524.475 436.953 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 407.529 Tm (Logging) Tj 0 g 1 0 0 1 139.923 407.529 Tm (techniques,) Tj 0 g 1 0 0 1 236.979 407.529 Tm (continued) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 383.905 Tm (Here's) Tj 0 g 1 0 0 1 105.371 383.905 Tm (an) Tj 0 g 1 0 0 1 120.661 383.905 Tm (important) Tj 0 g 1 0 0 1 169.567 383.905 Tm (note) Tj 0 g 1 0 0 1 194.031 383.905 Tm (about) Tj 0 g 1 0 0 1 224.611 383.905 Tm (the) Tj 0 g 1 0 0 1 242.959 383.905 Tm (LOG) Tj 0 g 1 0 0 1 269.249 383.905 Tm (target.) Tj 0 g 1 0 0 1 303.492 383.905 Tm (Normally,) Tj 0 g 1 0 0 1 352.992 383.905 Tm (when) Tj 0 g 1 0 0 1 382.34 383.905 Tm (a) Tj 0 g 1 0 0 1 391.514 383.905 Tm (rule) Tj 0 g 1 0 0 1 412.909 383.905 Tm (matches,) Tj 0 g 1 0 0 1 460.594 383.905 Tm (a) Tj 0 g 1 0 0 1 469.768 383.905 Tm (packet) Tj 0 g 1 0 0 1 505.232 383.905 Tm (is) Tj 0 g 1 0 0 1 70.875 370.73 Tm (either) Tj 0 g 1 0 0 1 101.444 370.73 Tm (accepted,) Tj 0 g 1 0 0 1 152.198 370.73 Tm (rejected,) Tj 0 g 1 0 0 1 197.441 370.73 Tm (or) Tj 0 g 1 0 0 1 210.278 370.73 Tm (dropped,) Tj 0 g 1 0 0 1 256.753 370.73 Tm (and) Tj 0 g 1 0 0 1 278.159 370.73 Tm (no) Tj 0 g 1 0 0 1 293.449 370.73 Tm (further) Tj 0 g 1 0 0 1 328.297 370.73 Tm (rules) Tj 0 g 1 0 0 1 355.192 370.73 Tm (are) Tj 0 g 1 0 0 1 374.145 370.73 Tm (processed.) Tj 0 g 1 0 0 1 431.004 370.73 Tm (However,) Tj 0 g 1 0 0 1 480.515 370.73 Tm (when) Tj 0 g 1 0 0 1 509.863 370.73 Tm (a) Tj 0 g 1 0 0 1 70.875 357.555 Tm (log) Tj 0 g 1 0 0 1 88.607 357.555 Tm (rule) Tj 0 g 1 0 0 1 110.002 357.555 Tm (matches,) Tj 0 g 1 0 0 1 157.687 357.555 Tm (the) Tj 0 g 1 0 0 1 176.035 357.555 Tm (packet) Tj 0 g 1 0 0 1 211.499 357.555 Tm (is) Tj 0 g 1 0 0 1 222.499 357.555 Tm (logged.) Tj 0 g 1 0 0 1 261.637 357.555 Tm (However,) Tj 0 g 1 0 0 1 311.148 357.555 Tm (it) Tj 0 g 1 0 0 1 319.706 357.555 Tm (is) Tj 0 g 1 0 0 1 330.706 357.555 Tm (not) Tj 0 g 1 0 0 1 349.054 357.555 Tm (accepted,) Tj 0 g 1 0 0 1 399.808 357.555 Tm (rejected,) Tj 0 g 1 0 0 1 445.051 357.555 Tm (or) Tj 0 g 1 0 0 1 457.888 357.555 Tm (dropped.) Tj 0 g 1 0 0 1 70.875 344.38 Tm (Instead,) Tj 0 g 1 0 0 1 113.071 344.38 Tm (the) Tj 0 g 1 0 0 1 131.419 344.38 Tm (packet) Tj 0 g 1 0 0 1 166.883 344.38 Tm (continues) Tj 0 g 1 0 0 1 217.021 344.38 Tm (on) Tj 0 g 1 0 0 1 232.311 344.38 Tm (to) Tj 0 g 1 0 0 1 244.543 344.38 Tm (the) Tj 0 g 1 0 0 1 262.891 344.38 Tm (next) Tj 0 g 1 0 0 1 286.739 344.38 Tm (rule,) Tj 0 g 1 0 0 1 311.192 344.38 Tm (or) Tj 0 g 1 0 0 1 324.029 344.38 Tm (the) Tj 0 g 1 0 0 1 342.377 344.38 Tm (default) Tj 0 g 1 0 0 1 378.457 344.38 Tm (chain) Tj 0 g 1 0 0 1 407.805 344.38 Tm (policy) Tj 0 g 1 0 0 1 438.979 344.38 Tm (is) Tj 0 g 1 0 0 1 449.979 344.38 Tm (applied) Tj 0 g 1 0 0 1 488.501 344.38 Tm (if) Tj 0 g 1 0 0 1 497.059 344.38 Tm (the) Tj 0 g 1 0 0 1 70.875 331.205 Tm (log) Tj 0 g 1 0 0 1 88.607 331.205 Tm (rule) Tj 0 g 1 0 0 1 110.002 331.205 Tm (is) Tj 0 g 1 0 0 1 121.002 331.205 Tm (the) Tj 0 g 1 0 0 1 139.35 331.205 Tm (last) Tj 0 g 1 0 0 1 159.524 331.205 Tm (on) Tj 0 g 1 0 0 1 174.814 331.205 Tm (the) Tj 0 g 1 0 0 1 193.162 331.205 Tm (chain.) Tj 0 g 1 0 0 1 70.875 304.03 Tm (The) Tj 0 g 1 0 0 1 92.886 304.03 Tm (LOG) Tj 0 g 2000 1 0 0 1 119.176 304.03 Tm (target) Tj 0 g 1 0 0 1 150.361 304.03 Tm (can) Tj 0 g 1 0 0 1 171.151 304.03 Tm (also) Tj 0 g 1 0 0 1 194.383 304.03 Tm (be) Tj 0 g 1 0 0 1 209.673 304.03 Tm (combined) Tj 0 g 1 0 0 1 260.416 304.03 Tm (with) Tj 0 g 1 0 0 1 283.032 304.03 Tm (the) Tj 0 g 1 0 0 1 301.38 304.03 Tm ("limit") Tj 0 g 1 0 0 1 331.795 304.03 Tm (module) Tj 0 g 1 0 0 1 370.922 304.03 Tm (\(described) Tj 0 g 1 0 0 1 425.328 304.03 Tm (in) Tj 0 g 1 0 0 1 436.944 304.03 Tm (the) Tj 0 g 1 0 0 1 455.292 304.03 Tm (iptables) Tj 0 g 1 0 0 1 496.256 304.03 Tm (man) Tj 0 g 1 0 0 1 70.875 290.855 Tm (page\)) Tj 0 g 1 0 0 1 102.06 290.855 Tm (to) Tj 0 g 1 0 0 1 114.292 290.855 Tm (minimize) Tj 0 g 1 0 0 1 160.734 290.855 Tm (duplicate) Tj 0 g 1 0 0 1 207.814 290.855 Tm (log) Tj 0 g 1 0 0 1 225.546 290.855 Tm (entries.) Tj 0 g 1 0 0 1 264.673 290.855 Tm (Here's) Tj 0 g 1 0 0 1 299.169 290.855 Tm (an) Tj 0 g 1 0 0 1 314.459 290.855 Tm (example:) Tj /F9 11 Tf 0 g 1 0 0 1 77.475 264.659 Tm (iptables) Tj 0 g 1 0 0 1 136.875 264.659 Tm (-A) Tj 0 g 1 0 0 1 156.675 264.659 Tm (INPUT) Tj 0 g 1 0 0 1 196.275 264.659 Tm (-m) Tj 0 g 1 0 0 1 216.075 264.659 Tm (state) Tj 0 g 1 0 0 1 255.675 264.659 Tm (--state) Tj 0 g 1 0 0 1 308.475 264.659 Tm (INVALID) Tj 0 g 1 0 0 1 361.275 264.659 Tm (-m) Tj 0 g 1 0 0 1 381.075 264.659 Tm (limit) Tj 0 g 1 0 0 1 420.675 264.659 Tm (--limit) Tj 0 g 1 0 0 1 473.475 264.659 Tm (5/minute) Tj 0 g 1 0 0 1 532.875 264.659 Tm (-j) Tj 0 g 1 0 0 1 552.675 264.659 Tm (LOG) Tj 0 g 1 0 0 1 579.075 264.659 Tm (--log-prefix) Tj 0 g 1 0 0 1 664.875 264.659 Tm ("INVALID) Tj 0 g 1 0 0 1 724.275 264.659 Tm (STATE:") Tj ET q 0 G 70.875 232.786 m 524.475 232.786 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 203.362 Tm (Creating) Tj 0 g 1 0 0 1 143.901 203.362 Tm (your) Tj 0 g 1 0 0 1 183.915 203.362 Tm (own) Tj 0 g 1 0 0 1 221.931 203.362 Tm (chains) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 179.738 Tm (iptables) Tj 0 g 1 0 0 1 111.839 179.738 Tm (allows) Tj 0 g 1 0 0 1 145.455 179.738 Tm (you) Tj 0 g 1 0 0 1 166.245 179.738 Tm (to) Tj 0 g 1 0 0 1 178.477 179.738 Tm (create) Tj 0 g 1 0 0 1 212.104 179.738 Tm (your) Tj 0 g 1 0 0 1 236.557 179.738 Tm (own) Tj 0 g 1 0 0 1 259.789 179.738 Tm (user-defined) Tj 0 g 1 0 0 1 326.746 179.738 Tm (chains) Tj 0 g 1 0 0 1 361.594 179.738 Tm (that) Tj 0 g 1 0 0 1 383.0 179.738 Tm (can) Tj 0 g 1 0 0 1 403.79 179.738 Tm (be) Tj 0 g 1 0 0 1 419.08 179.738 Tm (specified) Tj 0 g 1 0 0 1 465.544 179.738 Tm (as) Tj 0 g 1 0 0 1 480.218 179.738 Tm (targets) Tj 0 g 1 0 0 1 70.875 166.563 Tm (in) Tj 0 g 1 0 0 1 82.491 166.563 Tm (your) Tj 0 g 1 0 0 1 106.944 166.563 Tm (rules.) Tj 0 g 1 0 0 1 136.897 166.563 Tm (If) Tj 0 g 1 0 0 1 146.071 166.563 Tm (you) Tj 0 g 1 0 0 1 166.861 166.563 Tm (want) Tj 0 g 1 0 0 1 193.151 166.563 Tm (to) Tj 0 g 1 0 0 1 205.383 166.563 Tm (learn) Tj 0 g 1 0 0 1 232.894 166.563 Tm (how) Tj 0 g 1 0 0 1 256.126 166.563 Tm (to) Tj 0 g 1 0 0 1 268.358 166.563 Tm (do) Tj 0 g 1 0 0 1 283.648 166.563 Tm (this,) Tj 0 g 1 0 0 1 306.88 166.563 Tm (spend) Tj 0 g 1 0 0 1 339.902 166.563 Tm (some) Tj 0 g 1 0 0 1 369.855 166.563 Tm (time) Tj 0 g 1 0 0 1 393.692 166.563 Tm (going) Tj 0 g 1 0 0 1 423.656 166.563 Tm (through) Tj 0 g 1 0 0 1 464.015 166.563 Tm (Rusty's) Tj 0 g 1 0 0 1 70.875 153.388 Tm (excellent) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 117.339 153.388 Tm (http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/index.html) Tj /F1 11 Tf 0 g 1 0 0 1 507.696 153.388 Tm (.) Tj ET q 0 G 70.875 132.611 m 524.475 132.611 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 103.187 Tm (Enforcing) Tj 0 g 1 0 0 1 151.911 103.187 Tm (network) Tj 0 g 1 0 0 1 219.933 103.187 Tm (usage) Tj 0 g 1 0 0 1 273.969 103.187 Tm (policy) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 79.563 Tm (Firewalls) Tj 0 g 1 0 0 1 117.317 79.563 Tm (offer) Tj 0 g 1 0 0 1 142.386 79.563 Tm (a) Tj 0 g 1 0 0 1 151.56 79.563 Tm (lot) Tj 0 g 1 0 0 1 166.234 79.563 Tm (of) Tj 0 g 1 0 0 1 178.466 79.563 Tm (power) Tj 0 g 1 0 0 1 211.477 79.563 Tm (for) Tj 0 g 1 0 0 1 227.372 79.563 Tm (those) Tj 0 g 1 0 0 1 257.336 79.563 Tm (who) Tj 0 g 1 0 0 1 280.568 79.563 Tm (want) Tj 0 g 1 0 0 1 306.858 79.563 Tm (to) Tj 0 g 1 0 0 1 319.09 79.563 Tm (enforce) Tj 0 g 1 0 0 1 358.833 79.563 Tm (a) Tj 0 g 1 0 0 1 368.007 79.563 Tm (network) Tj 0 g 1 0 0 1 409.576 79.563 Tm (usage) Tj 0 g 1 0 0 1 442.598 79.563 Tm (policy) Tj 0 g 1 0 0 1 473.772 79.563 Tm (for) Tj 0 g 1 0 0 1 489.667 79.563 Tm (a) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (20) Tj ET endstream endobj 109 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 108 0 R /Annots 110 0 R >> endobj 110 0 obj [ 111 0 R ] endobj 111 0 obj << /Type /Annot /Subtype /Link /Rect [ 117.339 158.286 504.638 147.286 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/unreliable-guides/packet-filtering-HOWTO/index.html) /S /URI >> /H /I >> endobj 112 0 obj << /Length 7653 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (corporate) Tj 0 g 1 0 0 1 120.397 761.722 Tm (or) Tj 0 g 1 0 0 1 133.234 761.722 Tm (academic) Tj 0 g 1 0 0 1 183.361 761.722 Tm (LAN.) Tj 0 g 1 0 0 1 210.872 761.722 Tm (You) Tj 0 g 1 0 0 1 233.499 761.722 Tm (can) Tj 0 g 1 0 0 1 254.289 761.722 Tm (control) Tj 0 g 1 0 0 1 290.358 761.722 Tm (what) Tj 0 g 1 0 0 1 316.648 761.722 Tm (packets) Tj 0 g 1 0 0 1 357.612 761.722 Tm (your) Tj 0 g 1 0 0 1 382.065 761.722 Tm (machine) Tj 0 g 1 0 0 1 426.692 761.722 Tm (forwards) Tj 0 g 1 0 0 1 471.924 761.722 Tm (by) Tj 0 g 1 0 0 1 486.598 761.722 Tm (adding) Tj 0 g 1 0 0 1 70.875 748.547 Tm (rules) Tj 0 g 1 0 0 1 97.77 748.547 Tm (to) Tj 0 g 1 0 0 1 110.002 748.547 Tm (and) Tj 0 g 1 0 0 1 131.408 748.547 Tm (setting) Tj 0 g 1 0 0 1 166.872 748.547 Tm (policy) Tj 0 g 1 0 0 1 198.046 748.547 Tm (for) Tj 0 g 1 0 0 1 213.941 748.547 Tm (the) Tj 0 g 1 0 0 1 232.289 748.547 Tm (FORWARD) Tj 0 g 1 0 0 1 292.173 748.547 Tm (chain.) Tj 0 g 1 0 0 1 324.579 748.547 Tm (By) Tj 0 g 1 0 0 1 340.474 748.547 Tm (adding) Tj 0 g 1 0 0 1 376.554 748.547 Tm (rules) Tj 0 g 1 0 0 1 403.449 748.547 Tm (to) Tj 0 g 1 0 0 1 415.681 748.547 Tm (the) Tj 0 g 1 0 0 1 434.029 748.547 Tm (OUTPUT) Tj 0 g 1 0 0 1 482.308 748.547 Tm (chain,) Tj 0 g 1 0 0 1 70.875 735.372 Tm (you) Tj 0 g 1 0 0 1 91.665 735.372 Tm (can) Tj 0 g 1 0 0 1 112.455 735.372 Tm (also) Tj 0 g 1 0 0 1 135.687 735.372 Tm (control) Tj 0 g 1 0 0 1 171.756 735.372 Tm (what) Tj 0 g 1 0 0 1 198.046 735.372 Tm (happens) Tj 0 g 1 0 0 1 243.3 735.372 Tm (to) Tj 0 g 1 0 0 1 255.532 735.372 Tm (packets) Tj 0 g 1 0 0 1 296.496 735.372 Tm (that) Tj 0 g 1 0 0 1 317.902 735.372 Tm (are) Tj 0 g 1 0 0 1 336.855 735.372 Tm (generated) Tj 0 g 1 0 0 1 389.446 735.372 Tm (locally,) Tj 0 g 1 0 0 1 426.12 735.372 Tm (by) Tj 0 g 1 0 0 1 440.794 735.372 Tm (users) Tj 0 g 1 0 0 1 470.747 735.372 Tm (on) Tj 0 g 1 0 0 1 486.037 735.372 Tm (the) Tj 0 g 1 0 0 1 70.875 722.197 Tm (Linux) Tj 0 g 1 0 0 1 100.223 722.197 Tm (box) Tj 0 g 1 0 0 1 121.013 722.197 Tm (itself.) Tj 0 g 1 0 0 1 149.745 722.197 Tm (iptables) Tj 0 g 1 0 0 1 190.709 722.197 Tm (also) Tj 0 g 1 0 0 1 213.941 722.197 Tm (has) Tj 0 g 1 0 0 1 234.731 722.197 Tm (the) Tj 0 g 1 0 0 1 253.079 722.197 Tm (incredible) Tj 0 g 1 0 0 1 303.206 722.197 Tm (ability) Tj 0 g 1 0 0 1 334.38 722.197 Tm (to) Tj 0 g 1 0 0 1 346.612 722.197 Tm (filter) Tj 0 g 1 0 0 1 370.449 722.197 Tm (locally-created) Tj 0 g 1 0 0 1 447.174 722.197 Tm (packets) Tj 0 g 1 0 0 1 488.138 722.197 Tm (based) Tj 0 g 1 0 0 1 70.875 709.022 Tm (on) Tj 0 g 1 0 0 1 86.165 709.0 2000 22 Tm (owner) Tj 0 g 1 0 0 1 119.176 709.022 Tm (\(uid) Tj 0 g 1 0 0 1 140.571 709.022 Tm (or) Tj 0 g 1 0 0 1 153.408 709.022 Tm (gid\).) Tj 0 g 1 0 0 1 177.861 709.022 Tm (For) Tj 0 g 1 0 0 1 197.419 709.022 Tm (more) Tj 0 g 1 0 0 1 225.535 709.022 Tm (information) Tj 0 g 1 0 0 1 282.999 709.022 Tm (on) Tj 0 g 1 0 0 1 298.289 709.022 Tm (this,) Tj 0 g 1 0 0 1 321.521 709.022 Tm (search) Tj 0 g 1 0 0 1 357.59 709.022 Tm (for) Tj 0 g 1 0 0 1 373.485 709.022 Tm ("owner") Tj 0 g 1 0 0 1 414.306 709.022 Tm (in) Tj 0 g 1 0 0 1 425.922 709.022 Tm (the) Tj 0 g 1 0 0 1 444.27 709.022 Tm (iptables) Tj 0 g 1 0 0 1 485.234 709.022 Tm (man) Tj 0 g 1 0 0 1 70.875 695.847 Tm (page.) Tj ET q 0 G 70.875 675.07 m 524.475 675.07 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 645.646 Tm (Other) Tj 0 g 1 0 0 1 120.897 645.646 Tm (security) Tj 0 g 1 0 0 1 187.911 645.646 Tm (angles) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 622.022 Tm (In) Tj 0 g 1 0 0 1 83.107 622.022 Tm (our) Tj 0 g 1 0 0 1 102.06 622.022 Tm (example) Tj 0 g 1 0 0 1 146.687 622.022 Tm (firewall,) Tj 0 g 1 0 0 1 187.024 622.022 Tm (we've) Tj 0 g 1 0 0 1 217.857 622.022 Tm (assumed) Tj 0 g 1 0 0 1 265.542 622.022 Tm (that) Tj 0 g 1 0 0 1 286.948 622.022 Tm (all) Tj 0 g 1 0 0 1 301.006 622.022 Tm (internal) Tj 0 g 1 0 0 1 340.133 622.022 Tm (LAN) Tj 0 g 1 0 0 1 364.586 622.022 Tm (traffic) Tj 0 g 1 0 0 1 394.539 622.022 Tm (is) Tj 0 g 1 0 0 1 405.539 622.022 Tm (trustworthy,) Tj 0 g 1 0 0 1 465.445 622.022 Tm (and) Tj 0 g 1 0 0 1 486.851 622.022 Tm (that) Tj 0 g 1 0 0 1 70.875 608.847 Tm (only) Tj 0 g 1 0 0 1 94.107 608.847 Tm (incoming) Tj 0 g 1 0 0 1 141.176 608.847 Tm (Internet) Tj 0 g 1 0 0 1 181.535 608.847 Tm (traffic) Tj 0 g 1 0 0 1 211.488 608.847 Tm (must) Tj 0 g 1 0 0 1 238.383 608.847 Tm (be) Tj 0 g 1 0 0 1 253.673 608.847 Tm (carefully) Tj 0 g 1 0 0 1 297.684 608.847 Tm (monitored.) Tj 0 g 1 0 0 1 352.706 608.847 Tm (Depending) Tj 0 g 1 0 0 1 408.96 608.847 Tm (on) Tj 0 g 1 0 0 1 424.25 608.847 Tm (your) Tj 0 g 1 0 0 1 448.703 608.847 Tm (particular) Tj 0 g 1 0 0 1 70.875 595.672 Tm (network,) Tj 0 g 1 0 0 1 115.502 595.672 Tm (that) Tj 0 g 1 0 0 1 136.908 595.672 Tm (may) Tj 0 g 1 0 0 1 160.745 595.672 Tm (or) Tj 0 g 1 0 0 1 173.582 595.672 Tm (may) Tj 0 g 1 0 0 1 197.419 595.672 Tm (not) Tj 0 g 1 0 0 1 215.767 595.672 Tm (be) Tj 0 g 1 0 0 1 231.057 595.672 Tm (the) Tj 0 g 1 0 0 1 249.405 595.672 Tm (case.) Tj 0 g 1 0 0 1 278.753 595.672 Tm (There's) Tj 0 g 1 0 0 1 318.144 595.672 Tm (certainly) Tj 0 g 1 0 0 1 362.155 595.672 Tm (nothing) Tj 0 g 1 0 0 1 401.293 595.672 Tm (stopping) Tj 0 g 1 0 0 1 445.931 595.672 Tm (you) Tj 0 g 1 0 0 1 466.721 595.672 Tm (from) Tj 0 g 1 0 0 1 70.875 582.497 Tm (configuring) Tj 0 g 1 0 0 1 127.734 582.497 Tm (your) Tj 0 g 1 0 0 1 152.187 582.497 Tm (firewall) Tj 0 g 1 0 0 1 189.466 582.497 Tm (to) Tj 0 g 1 0 0 1 201.698 582.497 Tm (provide) Tj 0 g 1 0 0 1 240.825 582.497 Tm (protection) Tj 0 g 1 0 0 1 292.184 582.497 Tm (from) Tj 0 g 1 0 0 1 317.242 582.497 Tm (incoming) Tj 0 g 1 0 0 1 364.311 582.497 Tm (LAN) Tj 0 g 1 0 0 1 388.764 582.497 Tm (traffic.) Tj 0 g 1 0 0 1 421.775 582.497 Tm (Consider) Tj 0 g 1 0 0 1 468.844 582.497 Tm (other) Tj 0 g 1 0 0 1 70.875 569.322 Tm ("angles") Tj 0 g 1 0 0 1 114.149 569.322 Tm (of) Tj 0 g 1 0 0 1 126.381 569.322 Tm (your) Tj 0 g 1 0 0 1 150.834 569.322 Tm (network) Tj 0 g 1 0 0 1 192.403 569.322 Tm (that) Tj 0 g 1 0 0 1 213.809 569.322 Tm (you) Tj 0 g 1 0 0 1 234.599 569.322 Tm (may) Tj 0 g 1 0 0 1 258.436 569.322 Tm (want) Tj 0 g 1 0 0 1 284.726 569.322 Tm (to) Tj 0 g 1 0 0 1 296.958 569.322 Tm (protect.) Tj 0 g 1 0 0 1 336.701 569.322 Tm (It) Tj 0 g 1 0 0 1 345.875 569.322 Tm (may) Tj 0 g 1 0 0 1 369.712 569.322 Tm (also) Tj 0 g 1 0 0 1 392.944 569.322 Tm (be) Tj 0 g 1 0 0 1 408.234 569.322 Tm (appropriate) Tj 0 g 1 0 0 1 466.93 569.322 Tm (to) Tj 0 g 1 0 0 1 479.162 569.322 Tm (configure) Tj 0 g 1 0 0 1 70.875 556.147 Tm (two) Tj 0 g 1 0 0 1 91.049 556.147 Tm (separate) Tj 0 g 1 0 0 1 136.908 556.147 Tm (LAN) Tj 0 g 1 0 0 1 161.361 556.147 Tm (security) Tj 0 g 1 0 0 1 202.314 556.147 Tm ("zones",) Tj 0 g 1 0 0 1 245.588 556.147 Tm (each) Tj 0 g 1 0 0 1 272.494 556.147 Tm (with) Tj 0 g 1 0 0 1 295.11 556.147 Tm (its) Tj 0 g 1 0 0 1 309.168 556.147 Tm (own) Tj 0 g 1 0 0 1 332.4 556.147 Tm (security) Tj 0 g 1 0 0 1 373.353 556.147 Tm (policy.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (21) Tj ET endstream endobj 113 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 112 0 R >> endobj 114 0 obj << /Length 15699 >> stream BT /F1 18 Tf 0 g 1 0 0 1 70.875 756.696 Tm (Section) Tj 0 g 1 0 0 1 135.909 756.696 Tm (8.) Tj 0 g 1 0 0 1 155.925 756.696 Tm (Resources) Tj 0 g 1 0 0 1 70.875 725.046 Tm (tcpdump) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 701.422 Tm (In) Tj 0 g 1 0 0 1 83.107 701.422 Tm (this) Tj 0 g 1 0 0 1 103.281 701.422 Tm (section,) Tj 0 g 1 0 0 1 144.245 701.422 Tm (I'll) Tj 0 g 1 0 0 1 157.346 701.422 Tm (point) Tj 0 g 1 0 0 1 184.252 701.422 Tm (out) Tj 0 g 1 0 0 1 202.6 701.422 Tm (a) Tj 0 g 1 0 0 1 211.774 701.422 Tm (number) Tj 0 g 1 0 0 1 252.122 701.422 Tm (of) Tj 0 g 1 0 0 1 264.354 701.422 Tm (resources) Tj 0 g 1 0 0 1 315.702 701.422 Tm (that) Tj 0 g 1 0 0 1 337.108 701.422 Tm (you'll) Tj 0 g 1 0 0 1 364.883 701.422 Tm (find) Tj 0 g 1 0 0 1 385.673 701.422 Tm (helpful) Tj 0 g 1 0 0 1 421.137 701.422 Tm (as) Tj 0 g 1 0 0 1 435.811 701.422 Tm (you) Tj 0 g 1 0 0 1 456.601 701.422 Tm (put) Tj 0 g 1 0 0 1 474.949 701.422 Tm (together) Tj 0 g 1 0 0 1 70.875 688.247 Tm (your) Tj 0 g 1 0 0 1 95.328 688.247 Tm (own) Tj 0 g 1 0 0 1 118.56 688.247 Tm (stateful) Tj 0 g 1 0 0 1 157.082 688.247 Tm (firewall.) Tj 0 g 1 0 0 1 197.419 688.247 Tm (Let's) Tj 0 g 1 0 0 1 223.368 688.247 Tm (start) Tj 0 g 1 0 0 1 247.821 688.247 Tm (with) Tj 0 g 1 0 0 1 270.437 688.247 Tm (an) Tj 0 g 1 0 0 1 285.727 688.247 Tm (important) Tj 0 g 1 0 0 1 334.633 688.247 Tm (tool...) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 70.875 661.072 Tm (tcpdump) Tj /F1 11 Tf 0 g 1 0 0 1 116.118 661.072 Tm (is) Tj 0 g 1 0 0 1 127.118 661.072 Tm (an) Tj 0 g 1 0 0 1 142.408 661.072 Tm (essential) Tj 0 g 1 0 0 1 188.872 661.072 Tm (tool) Tj 0 g 1 0 0 1 209.662 661.072 Tm (for) Tj 0 g 1 0 0 1 225.557 661.072 Tm (exploring) Tj 0 g 1 0 0 1 273.242 661.072 Tm (low-level) Tj 0 g 1 0 0 1 321.84 661.072 Tm (packet) Tj 0 g 1 0 0 1 357.304 661.072 Tm (exchanges) Tj 0 g 1 0 0 1 413.558 661.072 Tm (and) Tj 0 g 1 0 0 1 434.964 661.072 Tm (verifying) Tj 0 g 1 0 0 1 478.975 661.072 Tm (that) Tj 0 g 1 0 0 1 500.381 661.072 Tm (your) Tj 0 g 1 0 0 1 70.875 647.897 Tm (firewall) Tj 0 g 1 0 0 1 108.154 647.897 Tm (is) Tj 0 g 1 0 0 1 119.154 647.897 Tm (working) Tj 0 g 1 0 0 1 160.107 647.897 Tm (correctly.) Tj 0 g 1 0 0 1 207.781 647.897 Tm (If) Tj 0 g 1 0 0 1 216.955 647.897 Tm (you) Tj 0 g 1 0 0 1 237.745 647.897 Tm (don't) Tj 0 g 1 0 0 1 264.31 647.897 Tm (have) Tj 0 g 1 0 0 1 291.216 647.897 Tm (it,) Tj 0 g 1 0 0 1 302.832 647.897 Tm (get) Tj 0 g 1 0 0 1 321.18 647.897 Tm (it.) Tj 0 g 1 0 0 1 332.796 647.897 Tm (If) Tj 0 g 1 0 0 1 341.97 647.897 Tm (you've) Tj 0 g 1 0 0 1 376.477 647.897 Tm (got) Tj 0 g 1 0 0 1 394.825 647.897 Tm (it,) Tj 0 g 1 0 0 1 406.441 647.897 Tm (start) Tj 0 g 1 0 0 1 430.894 647.897 Tm (using) Tj 0 g 1 0 0 1 460.242 647.897 Tm (it.) Tj ET q 0 G 70.875 627.12 m 524.475 627.12 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 597.696 Tm (netfilter.kernelnotes.org) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 70.875 574.072 Tm (http://netfilter.samba.org) Tj /F1 11 Tf 0 g 1 0 0 1 192.546 574.07 2000 2 Tm (is) Tj 0 g 1 0 0 1 203.546 574.072 Tm (the) Tj 0 g 1 0 0 1 221.894 574.072 Tm (home) Tj 0 g 1 0 0 1 252.463 574.072 Tm (page) Tj 0 g 1 0 0 1 279.985 574.072 Tm (for) Tj 0 g 1 0 0 1 295.88 574.072 Tm (the) Tj 0 g 1 0 0 1 314.228 574.072 Tm (netfilter) Tj 0 g 1 0 0 1 353.355 574.072 Tm (team.) Tj 0 g 1 0 0 1 383.924 574.072 Tm (There) Tj 0 g 1 0 0 1 415.714 574.072 Tm (are) Tj 0 g 1 0 0 1 434.667 574.072 Tm (lots) Tj 0 g 1 0 0 1 454.841 574.072 Tm (of) Tj 0 g 1 0 0 1 467.073 574.072 Tm (excellent) Tj 0 g 1 0 0 1 70.875 560.897 Tm (resources) Tj 0 g 1 0 0 1 122.223 560.897 Tm (on) Tj 0 g 1 0 0 1 137.513 560.897 Tm (this) Tj 0 g 1 0 0 1 157.687 560.897 Tm (page,) Tj 0 g 1 0 0 1 188.267 560.897 Tm (including) Tj 0 g 1 0 0 1 234.731 560.897 Tm (the) Tj 0 g 1 0 0 1 253.079 560.897 Tm (iptables) Tj 0 g 1 0 0 1 294.043 560.897 Tm (sources,) Tj 0 g 1 0 0 1 338.67 560.897 Tm (as) Tj 0 g 1 0 0 1 353.344 560.897 Tm (well) Tj 0 g 1 0 0 1 375.344 560.897 Tm (as) Tj 0 g 1 0 0 1 390.018 560.897 Tm (Rusty's) Tj 0 g 1 0 0 1 428.793 560.897 Tm (excellent) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 70.875 547.722 Tm ("unreliable) Tj 0 0 1 rg 1 0 0 1 125.523 547.722 Tm (guides") Tj /F1 11 Tf 0 g 1 0 0 1 164.892 547.722 Tm (.) Tj 0 g 1 0 0 1 171.008 547.722 Tm (These) Tj 0 g 1 0 0 1 204.635 547.722 Tm (include) Tj 0 g 1 0 0 1 242.541 547.722 Tm (a) Tj 0 g 1 0 0 1 251.715 547.722 Tm (basic) Tj 0 g 1 0 0 1 280.447 547.722 Tm (networking) Tj 0 g 1 0 0 1 336.69 547.722 Tm (concepts) Tj 0 g 1 0 0 1 383.77 547.722 Tm (HOWTO,) Tj 0 g 1 0 0 1 432.049 547.722 Tm (a) Tj 0 g 1 0 0 1 441.223 547.722 Tm (netfilter) Tj 0 g 1 0 0 1 70.875 534.547 Tm (\(iptables\)) Tj 0 g 1 0 0 1 119.165 534.547 Tm (HOWTO,) Tj 0 g 1 0 0 1 167.444 534.547 Tm (a) Tj 0 g 1 0 0 1 176.618 534.547 Tm (NAT) Tj 0 g 1 0 0 1 201.676 534.547 Tm (HOWTO,) Tj 0 g 1 0 0 1 249.955 534.547 Tm (and) Tj 0 g 1 0 0 1 271.361 534.547 Tm (a) Tj 0 g 1 0 0 1 280.535 534.547 Tm (netfilter) Tj 0 g 1 0 0 1 319.662 534.547 Tm (hacking) Tj 0 g 1 0 0 1 360.626 534.547 Tm (HOWTO) Tj 0 g 1 0 0 1 405.847 534.547 Tm (for) Tj 0 g 1 0 0 1 421.742 534.547 Tm (developers.) Tj 0 g 1 0 0 1 481.659 534.547 Tm (There's) Tj 0 g 1 0 0 1 70.875 521.372 Tm (also) Tj 0 g 1 0 0 1 94.107 521.372 Tm (a) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 103.281 521.372 Tm (netfilter) Tj 0 0 1 rg 1 0 0 1 142.408 521.372 Tm (FAQ) Tj /F1 11 Tf 0 g 1 0 0 1 168.082 521.372 Tm (available,) Tj 0 g 1 0 0 1 217.604 521.372 Tm (as) Tj 0 g 1 0 0 1 232.278 521.372 Tm (well) Tj 0 g 1 0 0 1 254.278 521.372 Tm (as) Tj 0 g 1 0 0 1 268.952 521.372 Tm (other) Tj 0 g 1 0 0 1 297.079 521.372 Tm (things.) Tj ET q 0 G 70.875 500.595 m 524.475 500.595 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 471.171 Tm (iptables) Tj 0 g 1 0 0 1 137.907 471.171 Tm (man) Tj 0 g 1 0 0 1 177.921 471.171 Tm (page) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 447.547 Tm (Thankfully,) Tj 0 g 1 0 0 1 127.118 447.547 Tm (there) Tj 0 g 1 0 0 1 155.245 447.547 Tm (are) Tj 0 g 1 0 0 1 174.198 447.547 Tm (a) Tj 0 g 1 0 0 1 183.372 447.547 Tm (lot) Tj 0 g 1 0 0 1 198.046 447.547 Tm (of) Tj 0 g 1 0 0 1 210.278 447.547 Tm (good) Tj 0 g 1 0 0 1 237.8 447.547 Tm (online) Tj 0 g 1 0 0 1 270.206 447.547 Tm (netfilter) Tj 0 g 1 0 0 1 309.333 447.547 Tm (resources;) Tj 0 g 1 0 0 1 363.739 447.547 Tm (however,) Tj 0 g 1 0 0 1 411.424 447.547 Tm (don't) Tj 0 g 1 0 0 1 437.989 447.547 Tm (forget) Tj 0 g 1 0 0 1 469.174 447.547 Tm (the) Tj 0 g 1 0 0 1 487.522 447.547 Tm (basics.) Tj 0 g 1 0 0 1 70.875 434.372 Tm (The) Tj 0 g 1 0 0 1 92.886 434.372 Tm (iptables) Tj 0 g 1 0 0 1 133.85 434.372 Tm (man) Tj 0 g 1 0 0 1 158.303 434.372 Tm (page) Tj 0 g 1 0 0 1 185.825 434.372 Tm (is) Tj 0 g 1 0 0 1 196.825 434.372 Tm (very) Tj 0 g 1 0 0 1 220.662 434.372 Tm (detailed) Tj 0 g 1 0 0 1 262.242 434.372 Tm (and) Tj 0 g 1 0 0 1 283.648 434.372 Tm (is) Tj 0 g 1 0 0 1 294.648 434.372 Tm (a) Tj 0 g 1 0 0 1 303.822 434.372 Tm (shining) Tj 0 g 1 0 0 1 341.728 434.372 Tm (example) Tj 0 g 1 0 0 1 386.355 434.372 Tm (of) Tj 0 g 1 0 0 1 398.587 434.372 Tm (what) Tj 0 g 1 0 0 1 424.877 434.372 Tm (a) Tj 0 g 1 0 0 1 434.051 434.372 Tm (man) Tj 0 g 1 0 0 1 458.504 434.372 Tm (page) Tj 0 g 1 0 0 1 486.026 434.372 Tm (should) Tj 0 g 1 0 0 1 70.875 421.197 Tm (be.) Tj 0 g 1 0 0 1 89.223 421.197 Tm (It's) Tj 0 g 1 0 0 1 105.998 421.197 Tm (actually) Tj 0 g 1 0 0 1 146.346 421.197 Tm (an) Tj 0 g 1 0 0 1 161.636 421.197 Tm (enjoyable) Tj 0 g 1 0 0 1 211.774 421.197 Tm (read.) Tj ET q 0 G 70.875 400.42 m 524.475 400.42 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 370.996 Tm (Advanced) Tj 0 g 1 0 0 1 155.925 370.996 Tm (Linux) Tj 0 g 1 0 0 1 203.949 370.996 Tm (routing) Tj 0 g 1 0 0 1 263.979 370.996 Tm (and) Tj 0 g 1 0 0 1 299.007 370.996 Tm (traffic) Tj 0 g 1 0 0 1 348.021 370.996 Tm (control) Tj 0 g 1 0 0 1 407.043 370.996 Tm (HOWTO) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 347.372 Tm (There's) Tj 0 g 1 0 0 1 110.266 347.372 Tm (now) Tj 0 g 1 0 0 1 133.498 347.372 Tm (an) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 148.788 347.372 Tm (Advanced) Tj 0 0 1 rg 1 0 0 1 200.763 347.372 Tm (Linux) Tj 0 0 1 rg 1 0 0 1 230.111 347.372 Tm (Routing) Tj 0 0 1 rg 1 0 0 1 271.075 347.372 Tm (and) Tj 0 0 1 rg 1 0 0 1 292.481 347.372 Tm (Traffic) Tj 0 0 1 rg 1 0 0 1 326.097 347.372 Tm (Control) Tj 0 0 1 rg 1 0 0 1 364.608 347.372 Tm (HOWTO) Tj /F1 11 Tf 0 g 1 0 0 1 409.829 347.372 Tm (available.) Tj 0 g 1 0 0 1 459.351 347.372 Tm (There's) Tj 0 g 1 0 0 1 498.742 347.372 Tm (a) Tj 0 g 1 0 0 1 70.875 334.197 Tm (good) Tj 0 g 1 0 0 1 98.397 334.197 Tm (section) Tj 0 g 1 0 0 1 136.303 334.197 Tm (that) Tj 0 g 1 0 0 1 157.709 334.197 Tm (shows) Tj 0 g 1 0 0 1 191.941 334.197 Tm (how) Tj 0 g 1 0 0 1 215.173 334.197 Tm (to) Tj 0 g 1 0 0 1 227.405 334.197 Tm (use) Tj 0 g 1 0 0 1 248.195 334.197 Tm (iptables) Tj 0 g 1 0 0 1 289.159 334.197 Tm (to) Tj 0 g 1 0 0 1 301.391 334.197 Tm (mark) Tj 0 g 1 0 0 1 328.891 334.197 Tm (packets,) Tj 0 g 1 0 0 1 372.913 334.197 Tm (and) Tj 0 g 1 0 0 1 394.319 334.197 Tm (then) Tj 0 g 1 0 0 1 418.783 334.197 Tm (use) Tj 0 g 1 0 0 1 439.573 334.197 Tm (Linux) Tj 0 g 1 0 0 1 468.921 334.197 Tm (routing) Tj 0 g 1 0 0 1 70.875 321.022 Tm (functionality) Tj 0 g 1 0 0 1 132.013 321.022 Tm (to) Tj 0 g 1 0 0 1 144.245 321.022 Tm (route) Tj 0 g 1 0 0 1 172.372 321.022 Tm (the) Tj 0 g 1 0 0 1 190.72 321.022 Tm (packets) Tj 0 g 1 0 0 1 231.684 321.022 Tm (based) Tj 0 g 1 0 0 1 264.706 321.022 Tm (on) Tj 0 g 1 0 0 1 279.996 321.022 Tm (these) Tj 0 g 1 0 0 1 309.96 321.022 Tm (marks.) Tj /F3 11 Tf 0 g 1 0 0 1 346.018 321.022 Tm (Note:) Tj 0 g 1 0 0 1 377.181 321.022 Tm (This) Tj 0 g 1 0 0 1 402.855 321.022 Tm (HOWTO) Tj 0 g 1 0 0 1 448.076 321.022 Tm (contains) Tj 0 g 1 0 0 1 70.875 307.847 Tm (references) Tj 0 g 1 0 0 1 129.571 307.847 Tm (to) Tj 0 g 1 0 0 1 143.013 307.847 Tm (Linux's) Tj 0 g 1 0 0 1 184.142 307.847 Tm (traffic) Tj 0 g 1 0 0 1 217.758 307.847 Tm (control) Tj 0 g 1 0 0 1 258.095 307.847 Tm (\(quality) Tj 0 g 1 0 0 1 300.269 307.847 Tm (of) Tj 0 g 1 0 0 1 313.711 307.847 Tm (service\)) Tj 0 g 1 0 0 1 358.349 307.847 Tm (functionality) Tj 0 g 1 0 0 1 426.802 307.847 Tm (\(accessed) Tj 0 g 1 0 0 1 70.875 294.672 Tm (through) Tj 0 g 1 0 0 1 115.48 294.672 Tm (the) Tj 0 g 1 0 0 1 135.038 294.672 Tm (new) Tj 0 g 1 0 0 1 159.491 294.672 Tm ("tc") Tj 0 g 1 0 0 1 182.756 294.672 Tm (command\).) Tj 0 g 1 0 0 1 244.488 294.672 Tm (This) Tj 0 g 1 0 0 1 270.162 294.672 Tm (new) Tj 0 g 1 0 0 1 294.615 294.672 Tm (functionality,) Tj 0 g 1 0 0 1 366.126 294.672 Tm (although) Tj 0 g 1 0 0 1 415.626 294.672 Tm (very) Tj 0 g 1 0 0 1 441.311 294.672 Tm (cool,) Tj 0 g 1 0 0 1 470.043 294.672 Tm (is) Tj 0 g 1 0 0 1 482.275 294.672 Tm (very) Tj 0 g 1 0 0 1 70.875 281.497 Tm (poorly) Tj 0 g 1 0 0 1 107.549 281.497 Tm (documented,) Tj 0 g 1 0 0 1 179.06 281.497 Tm (and) Tj 0 g 1 0 0 1 201.676 281.497 Tm (attempting) Tj 0 g 1 0 0 1 260.955 281.497 Tm (to) Tj 0 g 1 0 0 1 274.397 281.497 Tm (figure) Tj 0 g 1 0 0 1 308.013 281.497 Tm (out) Tj 0 g 1 0 0 1 328.176 281.497 Tm (all) Tj 0 g 1 0 0 1 343.466 281.497 Tm (aspects) Tj 0 g 1 0 0 1 387.488 281.497 Tm (of) Tj 0 g 1 0 0 1 400.93 281.497 Tm (Linux) Tj 0 g 1 0 0 1 433.325 281.497 Tm (traffic) Tj 0 g 1 0 0 1 466.941 281.497 Tm (control) T 2000 j 0 g 1 0 0 1 70.875 268.322 Tm (can) Tj 0 g 1 0 0 1 92.886 268.322 Tm (be) Tj 0 g 1 0 0 1 108.781 268.322 Tm (a) Tj 0 g 1 0 0 1 117.955 268.322 Tm (very) Tj 0 g 1 0 0 1 143.64 268.322 Tm (frustrating) Tj 0 g 1 0 0 1 201.698 268.322 Tm (task) Tj 0 g 1 0 0 1 226.767 268.322 Tm (at) Tj 0 g 1 0 0 1 239.604 268.322 Tm (this) Tj 0 g 1 0 0 1 262.22 268.322 Tm (point.) Tj ET q 0 G 70.875 247.545 m 524.475 247.545 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 218.121 Tm (Mailing) Tj 0 g 1 0 0 1 132.885 218.121 Tm (lists) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 194.497 Tm (There's) Tj 0 g 1 0 0 1 110.266 194.497 Tm (a) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 119.44 194.497 Tm (netfilter) Tj 0 0 1 rg 1 0 0 1 158.567 194.497 Tm (\(iptables\)) Tj 0 0 1 rg 1 0 0 1 206.857 194.497 Tm (mailing) Tj 0 0 1 rg 1 0 0 1 244.752 194.497 Tm (list) Tj /F1 11 Tf 0 g 1 0 0 1 261.252 194.497 Tm (available,) Tj 0 g 1 0 0 1 310.774 194.497 Tm (as) Tj 0 g 1 0 0 1 325.448 194.497 Tm (well) Tj 0 g 1 0 0 1 347.448 194.497 Tm (as) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 362.122 194.497 Tm (one) Tj 0 0 1 rg 1 0 0 1 383.528 194.497 Tm (for) Tj 0 0 1 rg 1 0 0 1 399.423 194.497 Tm (netfilter) Tj 0 0 1 rg 1 0 0 1 438.55 194.497 Tm (developers) Tj /F1 11 Tf 0 g 1 0 0 1 495.409 194.497 Tm (.) Tj 0 g 1 0 0 1 501.525 194.497 Tm (You) Tj 0 g 1 0 0 1 70.875 181.322 Tm (can) Tj 0 g 1 0 0 1 91.665 181.322 Tm (also) Tj 0 g 1 0 0 1 114.897 181.322 Tm (access) Tj 0 g 1 0 0 1 152.187 181.322 Tm (the) Tj 0 g 1 0 0 1 170.535 181.322 Tm (mailing) Tj 0 g 1 0 0 1 208.43 181.322 Tm (list) Tj 0 g 1 0 0 1 224.93 181.322 Tm (archives) Tj 0 g 1 0 0 1 268.941 181.322 Tm (at) Tj 0 g 1 0 0 1 281.173 181.322 Tm (these) Tj 0 g 1 0 0 1 311.137 181.322 Tm (URLs.) Tj ET q 0 G 70.875 160.545 m 524.475 160.545 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 131.121 Tm (Building) Tj 0 g 1 0 0 1 139.905 131.121 Tm (Internet) Tj 0 g 1 0 0 1 205.947 131.121 Tm (Firewalls,) Tj 0 g 1 0 0 1 286.947 131.121 Tm (Second) Tj 0 g 1 0 0 1 352.989 131.121 Tm (Edition) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 107.497 Tm (In) Tj 0 g 1 0 0 1 83.107 107.497 Tm (June) Tj 0 g 1 0 0 1 110.013 107.497 Tm (2000,) Tj 0 g 1 0 0 1 140.593 107.497 Tm (O'Reilly) Tj 0 g 1 0 0 1 181.194 107.497 Tm (released) Tj 0 g 1 0 0 1 226.437 107.497 Tm (an) Tj 0 g 1 0 0 1 241.727 107.497 Tm (excellent) Tj 0 g 1 0 0 1 288.191 107.497 Tm (book) Tj 0 g 1 0 0 1 315.097 107.497 Tm (--) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 331.003 107.497 Tm (Building) Tj 0 0 1 rg 1 0 0 1 373.188 107.497 Tm (Internet) Tj 0 0 1 rg 1 0 0 1 413.547 107.497 Tm (Firewalls,) Tj 0 0 1 rg 1 0 0 1 463.047 107.497 Tm (Second) Tj 0 0 1 rg 1 0 0 1 70.875 94.322 Tm (Edition) Tj /F1 11 Tf 0 g 1 0 0 1 107.56 94.322 Tm (.) Tj 0 g 1 0 0 1 113.676 94.322 Tm (It's) Tj 0 g 1 0 0 1 130.451 94.322 Tm (great) Tj 0 g 1 0 0 1 158.578 94.322 Tm (reference) Tj 0 g 1 0 0 1 208.1 94.322 Tm (book,) Tj 0 g 1 0 0 1 238.064 94.322 Tm (especially) Tj 0 g 1 0 0 1 289.412 94.322 Tm (for) Tj 0 g 1 0 0 1 305.307 94.322 Tm (those) Tj 0 g 1 0 0 1 335.271 94.322 Tm (times) Tj 0 g 1 0 0 1 364.608 94.322 Tm (when) Tj 0 g 1 0 0 1 393.956 94.322 Tm (you) Tj 0 g 1 0 0 1 414.746 94.322 Tm (want) Tj 0 g 1 0 0 1 441.036 94.322 Tm (to) Tj 0 g 1 0 0 1 453.268 94.322 Tm (configure) Tj 0 g 1 0 0 1 501.569 94.322 Tm (your) Tj 0 g 1 0 0 1 70.875 81.147 Tm (firewall) Tj 0 g 1 0 0 1 108.154 81.147 Tm (to) Tj 0 g 1 0 0 1 120.386 81.147 Tm (accept) Tj 0 g 1 0 0 1 155.85 81.147 Tm (\(or) Tj 0 g 1 0 0 1 172.35 81.147 Tm (flat-out) Tj 0 g 1 0 0 1 211.796 81.147 Tm (reject\)) Tj 0 g 1 0 0 1 245.412 81.147 Tm (a) Tj 0 g 1 0 0 1 254.586 81.147 Tm (little-known) Tj 0 g 1 0 0 1 315.416 81.147 Tm (protocol) Tj 0 g 1 0 0 1 357.601 81.147 Tm (that) Tj 0 g 1 0 0 1 379.007 81.147 Tm (you're) Tj 0 g 1 0 0 1 411.677 81.147 Tm (unfamiliar) Tj 0 g 1 0 0 1 462.409 81.147 Tm (with.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (22) Tj ET endstream endobj 115 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 114 0 R /Annots 116 0 R >> endobj 116 0 obj [ 117 0 R 118 0 R 119 0 R 120 0 R 121 0 R 122 0 R 123 0 R 124 0 R 125 0 R 126 0 R 127 0 R 128 0 R 129 0 R 130 0 R 131 0 R 132 0 R 133 0 R 134 0 R 135 0 R 136 0 R 137 0 R 138 0 R 139 0 R 140 0 R 141 0 R 142 0 R ] endobj 117 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 668.97 113.06 657.97 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.tcpdump.org) /S /URI >> /H /I >> endobj 118 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 580.97 189.488 569.97 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/) /S /URI >> /H /I >> endobj 119 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 554.62 122.465 543.62 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/unreliable-guides/index.html) /S /URI >> /H /I >> endobj 120 0 obj << /Type /Annot /Subtype /Link /Rect [ 125.523 554.62 161.834 543.62 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/unreliable-guides/index.html) /S /URI >> /H /I >> endobj 121 0 obj << /Type /Annot /Subtype /Link /Rect [ 103.281 528.27 139.35 517.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/netfilter-faq.html) /S /URI >> /H /I >> endobj 122 0 obj << /Type /Annot /Subtype /Link /Rect [ 142.408 528.27 165.024 517.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://netfilter.samba.org/netfilter-faq.html) /S /URI >> /H /I >> endobj 123 0 obj << /Type /Annot /Subtype /Link /Rect [ 148.788 352.27 197.705 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 124 0 obj << /Type /Annot /Subtype /Link /Rect [ 200.763 352.27 227.053 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 125 0 obj << /Type /Annot /Subtype /Link /Rect [ 230.111 352.27 268.017 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 126 0 obj << /Type /Annot /Subtype /Link /Rect [ 271.075 352.27 289.423 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 127 0 obj << /Type /Annot /Subtype /Link /Rect [ 292.481 352.27 323.039 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 128 0 obj << /Type /Annot /Subtype /Link /Rect [ 326.097 352.27 361.55 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 129 0 obj << /Type /Annot /Subtype /Link /Rect [ 364.608 352.27 406.771 341.27 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.ds9a.nl/2.4Routing/) /S /URI >> /H /I >> endobj 130 0 obj << /Type /Annot /Subtype /Link /Rect [ 119.44 198.395 155.509 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://us4.samba.org/mailman/listinfo/netfilter) /S /URI >> /H /I >> endobj 131 0 obj << /Type /Annot /Subtype /Link /Rect [ 158.567 198.395 203.799 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://us4.samba.org/mailman/listinfo/netfilter) /S /URI >> /H /I >> endobj 132 0 obj << /Type /Annot /Subtype /Link /Rect [ 206.857 198.395 241.694 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://us4.samba.org/mailman/listinfo/netfilter) /S /URI >> /H /I >> endobj 133 0 obj << /Type /Annot /Subtype /Link /Rect [ 244.752 198.395 258.194 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://us4.samba.org/mailman/listinfo/netfilter) /S /URI >> /H /I >> endobj 134 0 obj << /Type /Annot / 2000 Subtype /Link /Rect [ 362.122 198.395 380.47 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://lists.samba.org/mailman/listinfo/netfilter-devel) /S /URI >> /H /I >> endobj 135 0 obj << /Type /Annot /Subtype /Link /Rect [ 383.528 198.395 396.365 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://lists.samba.org/mailman/listinfo/netfilter-devel) /S /URI >> /H /I >> endobj 136 0 obj << /Type /Annot /Subtype /Link /Rect [ 399.423 198.395 435.492 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://lists.samba.org/mailman/listinfo/netfilter-devel) /S /URI >> /H /I >> endobj 137 0 obj << /Type /Annot /Subtype /Link /Rect [ 438.55 198.395 492.351 187.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://lists.samba.org/mailman/listinfo/netfilter-devel) /S /URI >> /H /I >> endobj 138 0 obj << /Type /Annot /Subtype /Link /Rect [ 331.003 110.395 370.13 99.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.oreilly.com/catalog/fire2/) /S /URI >> /H /I >> endobj 139 0 obj << /Type /Annot /Subtype /Link /Rect [ 373.188 110.395 410.489 99.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.oreilly.com/catalog/fire2/) /S /URI >> /H /I >> endobj 140 0 obj << /Type /Annot /Subtype /Link /Rect [ 413.547 110.395 459.989 99.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.oreilly.com/catalog/fire2/) /S /URI >> /H /I >> endobj 141 0 obj << /Type /Annot /Subtype /Link /Rect [ 463.047 110.395 500.348 99.395 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.oreilly.com/catalog/fire2/) /S /URI >> /H /I >> endobj 142 0 obj << /Type /Annot /Subtype /Link /Rect [ 70.875 97.22 104.502 86.22 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (http://www.oreilly.com/catalog/fire2/) /S /URI >> /H /I >> endobj 143 0 obj << /Length 6038 >> stream BT /F1 11 Tf 0 g 1 0 0 1 70.875 761.722 Tm (Well,) Tj 0 g 1 0 0 1 98.375 761.722 Tm (that's) Tj 0 g 1 0 0 1 127.382 761.722 Tm (it) Tj 0 g 1 0 0 1 135.94 761.722 Tm (for) Tj 0 g 1 0 0 1 151.835 761.722 Tm (our) Tj 0 g 1 0 0 1 170.788 761.722 Tm (resources) Tj 0 g 1 0 0 1 222.136 761.722 Tm (list,) Tj 0 g 1 0 0 1 241.694 761.722 Tm (and) Tj 0 g 1 0 0 1 263.1 761.722 Tm (our) Tj 0 g 1 0 0 1 282.053 761.722 Tm (tutorial) Tj 0 g 1 0 0 1 318.122 761.722 Tm (is) Tj 0 g 1 0 0 1 329.122 761.722 Tm (complete.) Tj 0 g 1 0 0 1 379.865 761.722 Tm (I) Tj 0 g 1 0 0 1 385.981 761.722 Tm (hope) Tj 0 g 1 0 0 1 413.503 761.722 Tm (that) Tj 0 g 1 0 0 1 434.909 761.722 Tm (this) Tj 0 g 1 0 0 1 455.083 761.722 Tm (tutorial) Tj 0 g 1 0 0 1 491.152 761.722 Tm (has) Tj 0 g 1 0 0 1 70.875 748.547 Tm (been) Tj 0 g 1 0 0 1 98.397 748.547 Tm (helpful) Tj 0 g 1 0 0 1 133.861 748.547 Tm (to) Tj 0 g 1 0 0 1 146.093 748.547 Tm (you,) Tj 0 g 1 0 0 1 169.941 748.547 Tm (and) Tj 0 g 1 0 0 1 191.347 748.547 Tm (I) Tj 0 g 1 0 0 1 197.463 748.547 Tm (look) Tj 0 g 1 0 0 1 220.695 748.547 Tm (forward) Tj 0 g 1 0 0 1 260.427 748.547 Tm (to) Tj 0 g 1 0 0 1 272.659 748.547 Tm (your) Tj 0 g 1 0 0 1 297.112 748.547 Tm (feedback.) Tj ET q 0 G 70.875 727.77 m 524.475 727.77 l 1.0 w S Q BT /F1 18 Tf 0 g 1 0 0 1 70.875 698.346 Tm (Your) Tj 0 g 1 0 0 1 113.895 698.346 Tm (feedback) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 674.722 Tm (We) Tj 0 g 1 0 0 1 90.433 674.722 Tm (look) Tj 0 g 1 0 0 1 113.665 674.722 Tm (forward) Tj 0 g 1 0 0 1 153.397 674.722 Tm (to) Tj 0 g 1 0 0 1 165.629 674.722 Tm (getting) Tj 0 g 1 0 0 1 201.709 674.722 Tm (your) Tj 0 g 1 0 0 1 226.162 674.722 Tm (feedback) Tj 0 g 1 0 0 1 273.858 674.722 Tm (on) Tj 0 g 1 0 0 1 289.148 674.722 Tm (this) Tj 0 g 1 0 0 1 309.322 674.722 Tm (tutorial.) Tj 0 g 1 0 0 1 348.449 674.722 Tm (Additionally,) Tj 0 g 1 0 0 1 410.808 674.722 Tm (you) Tj 0 g 1 0 0 1 431.598 674.722 Tm (are) Tj 0 g 1 0 0 1 450.551 674.722 Tm (welcome) Tj 0 g 1 0 0 1 497.004 674.722 Tm (to) Tj 0 g 1 0 0 1 70.875 661.547 Tm (contact) Tj 0 g 1 0 0 1 109.397 661.547 Tm (the) Tj 0 g 1 0 0 1 127.745 661.547 Tm (author,) Tj 0 g 1 0 0 1 165.046 661.547 Tm (Daniel) Tj 0 g 1 0 0 1 199.278 661.547 Tm (Robbins,) Tj 0 g 1 0 0 1 245.742 661.547 Tm (at) Tj /F2 11 Tf 0 0 1 rg 1 0 0 1 257.974 661.547 Tm (drobbins@gentoo.org) Tj /F1 11 Tf 0 g 1 0 0 1 366.973 661.547 Tm (.) Tj ET q 0 G 70.875 631.77 m 524.475 631.77 l 1.0 w S Q BT ET q 0 G 70.875 625.77 m 524.475 625.77 l 1.0 w S Q BT /F1 14 Tf 0 g 1 0 0 1 70.875 592.718 Tm (Colophon) Tj /F1 11 Tf 0 g 1 0 0 1 70.875 570.422 Tm (This) Tj 0 g 1 0 0 1 94.712 570.422 Tm (tutorial) Tj 0 g 1 0 0 1 130.781 570.422 Tm (was) Tj 0 g 1 0 0 1 153.397 570.422 Tm (written) Tj 0 g 1 0 0 1 188.85 570.422 Tm (entirely) Tj 0 g 1 0 0 1 227.361 570.422 Tm (in) Tj 0 g 1 0 0 1 238.977 570.422 Tm (XML,) Tj 0 g 1 0 0 1 267.709 570.422 Tm (using) Tj 0 g 1 0 0 1 297.057 570.422 Tm (the) Tj 0 g 1 0 0 1 315.405 570.422 Tm (developerWorks) Tj 0 g 1 0 0 1 397.927 570.422 Tm (Toot-O-Matic) Tj 0 g 1 0 0 1 470.681 570.422 Tm (tutorial) Tj 0 g 1 0 0 1 70.875 557.247 Tm (generator.) Tj 0 g 1 0 0 1 124.071 557.247 Tm (The) Tj 0 g 1 0 0 1 146.082 557.247 Tm (Toot-O-Matic) Tj 0 g 1 0 0 1 218.836 557.247 Tm (tool) Tj 0 g 1 0 0 1 239.626 557.247 Tm (is) Tj 0 g 1 0 0 1 250.626 557.247 Tm (a) Tj 0 g 1 0 0 1 259.8 557.247 Tm (short) Tj 0 g 1 0 0 1 287.311 557.247 Tm (Java) Tj 0 g 1 0 0 1 313.601 557.247 Tm (program) Tj 0 g 1 0 0 1 357.612 557.247 Tm (that) Tj 0 g 1 0 0 1 379.018 557.247 Tm (uses) Tj 0 g 1 0 0 1 405.308 557.247 Tm (XSLT) Tj 0 g 1 0 0 1 435.877 557.247 Tm (stylesheets) Tj 0 g 1 0 0 1 493.957 557.247 Tm (to) Tj 0 g 1 0 0 1 70.875 544.072 Tm (convert) Tj 0 g 1 0 0 1 110.002 544.072 Tm (the) Tj 0 g 1 0 0 1 128.35 544.072 Tm (XML) Tj 0 g 1 0 0 1 154.024 544.072 Tm (source) Tj 0 g 1 0 0 1 190.093 544.072 Tm (into) Tj 0 g 1 0 0 1 210.883 544.072 Tm (a) Tj 0 g 1 0 0 1 220.057 544.072 Tm (number) Tj 0 g 1 0 0 1 260.405 544.072 Tm (of) Tj 0 g 1 0 0 1 272.637 544.072 Tm (HTML) Tj 0 g 1 0 0 1 305.637 544.072 Tm (pages,) Tj 0 g 1 0 0 1 341.717 544.072 Tm (a) Tj 0 g 1 0 0 1 350.891 544.072 Tm (zip) Tj 0 g 1 0 0 1 368.007 544.072 Tm (file,) Tj 0 g 1 0 0 1 388.181 544.072 Tm (JPEG) Tj 0 g 1 0 0 1 419.971 544.072 Tm (heading) Tj 0 g 1 0 0 1 462.167 544.072 Tm (graphics,) Tj 0 g 1 0 0 1 70.875 530.897 Tm (and) Tj 0 g 1 0 0 1 92.281 530.897 Tm (PDF) Tj 0 g 1 0 0 1 117.339 530.897 Tm (files.) Tj 0 g 1 0 0 1 143.013 530.897 Tm (Our) Tj 0 g 1 0 0 1 164.408 530.897 Tm (ability) Tj 0 g 1 0 0 1 195.582 530.897 Tm (to) Tj 0 g 1 0 0 1 207.814 530.897 Tm (generate) Tj 0 g 1 0 0 1 254.289 530.897 Tm (multiple) Tj 0 g 1 0 0 1 295.242 530.897 Tm (text) Tj 0 g 1 0 0 1 316.032 530.897 Tm (and) Tj 0 g 1 0 0 1 337.438 530.897 Tm (binary) Tj 0 g 1 0 0 1 370.449 530.897 Tm (formats) Tj 0 g 1 0 0 1 410.181 530.897 Tm (from) Tj 0 g 1 0 0 1 435.239 530.897 Tm (a) Tj 0 g 1 0 0 1 444.413 530.897 Tm (single) Tj 0 g 1 0 0 1 476.203 530.897 Tm (source) Tj 0 g 1 0 0 1 70.875 517.722 Tm (file) Tj 0 g 1 0 0 1 87.991 517.722 Tm (illustrates) Tj 0 g 1 0 0 1 137.502 517.722 Tm (the) Tj 0 g 1 0 0 1 155.85 517.722 Tm (power) Tj 0 g 1 0 0 1 188.861 517.722 Tm (and) Tj 0 g 1 0 0 1 210.267 517.722 Tm (flexibility) Tj 0 g 1 0 0 1 254.883 517.722 Tm (of) Tj 0 g 1 0 0 1 267.115 517.722 Tm (XML.) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 804.265 Tm (Presented) Tj 0 g 1 0 0 1 119.235 804.265 Tm (by) Tj 0 g 1 0 0 1 132.575 804.265 Tm (developerWorks,) Tj 0 g 1 0 0 1 210.375 804.265 Tm (your) Tj 0 g 1 0 0 1 232.605 804.265 Tm (source) Tj 0 g 1 0 0 1 265.395 804.265 Tm (for) Tj 0 g 1 0 0 1 279.845 804.265 Tm (great) Tj 0 g 1 0 0 1 305.415 804.265 Tm (tutorials) Tj /F9 10 Tf 0 g 1 0 0 1 393.875 805.155 Tm (ibm.com/developerWorks) Tj /F1 10 Tf 0 g 1 0 0 1 70.875 47.32 Tm (Linux) Tj 0 g 1 0 0 1 97.555 47.32 Tm (2.4) Tj 0 g 1 0 0 1 114.235 47.32 Tm (stateful) Tj 0 g 1 0 0 1 149.255 47.32 Tm (firewall) Tj 0 g 1 0 0 1 183.145 47.32 Tm (design) Tj 0 g 1 0 0 1 485.845 47.32 Tm (Page) Tj 0 g 1 0 0 1 511.975 47.32 Tm (23) Tj ET endstream endobj 144 0 obj << /Type /Page /Parent 2 0 R /MediaBox [ 0 0 595 841 ] /Resources 4 0 R /Contents 143 0 R /Annots 145 0 R >> endobj 145 0 obj [ 146 0 R ] endobj 146 0 obj << /Type /Annot /Subtype /Link /Rect [ 257.974 668.445 363.915 657.445 ] /C [ 0 0 0 ] /Border [ 0 0 0 ] /A << /URI (mailto:drobbins@gentoo.org) /S /URI >> /H /I >> endobj xref bca 0 147 0000000000 65535 f 0000000009 00000 n 0000000058 00000 n 0000000280 00000 n 0000000336 00000 n 0000000558 00000 n 0000000669 00000 n 0000000783 00000 n 0000000888 00000 n 0000001002 00000 n 0000001110 00000 n 0000001221 00000 n 0000001331 00000 n 0000001451 00000 n 0000001564 00000 n 0000001680 00000 n 0000001788 00000 n 0000001901 00000 n 0000002008 00000 n 0000002127 00000 n 0000005848 00000 n 0000005971 00000 n 0000006236 00000 n 0000006373 00000 n 0000006440 00000 n 0000006578 00000 n 0000006717 00000 n 0000006856 00000 n 0000006995 00000 n 0000007132 00000 n 0000007199 00000 n 0000007337 00000 n 0000007476 00000 n 0000007615 00000 n 0000007752 00000 n 0000007819 00000 n 0000007957 00000 n 0000008096 00000 n 0000008235 00000 n 0000008372 00000 n 0000008439 00000 n 0000008577 00000 n 0000008716 00000 n 0000008855 00000 n 0000008992 00000 n 0000009059 00000 n 0000009197 00000 n 0000009336 00000 n 0000009475 00000 n 0000009612 00000 n 0000009680 00000 n 0000009818 00000 n 0000009957 00000 n 0000010096 00000 n 0000010233 00000 n 0000010301 00000 n 0000010439 00000 n 0000010578 00000 n 0000010717 00000 n 0000010856 00000 n 0000010995 00000 n 0000011134 00000 n 0000011271 00000 n 0000011339 00000 n 0000011477 00000 n 0000011616 00000 n 0000023125 00000 n 0000023248 00000 n 0000023296 00000 n 0000023473 00000 n 0000023648 00000 n 0000023819 00000 n 0000023991 00000 n 0000038075 00000 n 0000038198 00000 n 0000038225 00000 n 0000038403 00000 n 0000056282 00000 n 0000056390 00000 n 0000060048 00000 n 0000060156 00000 n 0000077346 00000 n 0000077454 00000 n 0000088436 00000 n 0000088544 00000 n 0000108078 00000 n 0000108186 00000 n 0000124315 00000 n 0000124423 00000 n 0000144096 00000 n 0000144204 00000 n 0000149706 00000 n 0000149814 00000 n 0000166425 00000 n 0000166533 00000 n 0000183946 00000 n 0000184054 00000 n 0000203308 00000 n 0000203416 00000 n 0000216290 00000 n 0000216398 00000 n 0000221267 00000 n 0000221377 00000 n 0000236972 00000 n 0000237082 00000 n 0000251300 00000 n 0000251410 00000 n 0000259349 00000 n 0000259459 00000 n 0000275516 00000 n 0000275642 00000 n 0000275671 00000 n 0000275904 00000 n 0000283610 00000 n 0000283720 00000 n 0000299473 00000 n 0000299599 00000 n 0000299828 00000 n 0000300001 00000 n 0000300180 00000 n 0000300387 00000 n 0000300595 00000 n 0000300792 00000 n 0000300990 00000 n 0000301173 00000 n 0000301356 00000 n 0000301539 00000 n 0000301722 00000 n 0000301905 00000 n 0000302087 00000 n 0000302270 00000 n 0000302471 00000 n 0000302673 00000 n 0000302875 00000 n 0000303077 00000 n 0000303286 00000 n 0000303496 00000 n 0000303706 00000 n 0000303915 00000 n 0000304105 00000 n 0000304296 00000 n 0000304487 00000 n 0000304678 00000 n 0000304865 00000 n 0000310956 00000 n 0000311082 00000 n 0000311111 00000 n trailer << /Size 147 /Root 1 0 R /Info 3 0 R >> startxref 311292 %%EOF 0