Exercise 56: Hawaii PineTrees, Inc.

The application-level gateway you will most likely implement is Squid, so the procedure for so doing will be the same as that given in exercise 53. The most relevant part of this exercise is creating the list of the questions and concerns that should be asked when you reach the site. When generating that list, you should verify that you included the following:

• What are internal users allowed access to outside of the network? What services must be made available to them?

• What services should be made available to anonymous users?

• What services should be made available to trusted users?

• What protocols should be allowed to pass from the internal network to the external network?

• What protocols should be allowed to enter the internal network from the outside?