" ! %# $'&)(+*-,/.10325476'6'6 89;:<9>=@?BA5C DFE
GIHKJ)LNMPO/QSRUTVXl WPYZWNH[^nR/mKJ1QSRo\]f/O_^nOX^`HKp+WbqradYtcSst^`QSu`WNHKceR/QS^`vwfg\ TihjWNkK^`WNQSQeR/^`WNk
xy\[^`WNQSfzWNm{Qe^|u|J1u`Q[Hˆ}d‡rstceu|H[^|f/R/Q]^|vN‰ŠMd\'‹~€‰ŠQe[vNPM ‚[‚eƒ„P‚…[†
Œ 7Ž‘Ž’Ž”“–• —i“d˜š™>'›œŸžd“PžKFžˆ™¡  › ˜¢ ¤
£ ž{7™+¥ ›“d“d 
¦ Œ §i™¨™¨©™¡ ª «¬ ­¯®%° Œ ± ª «²¬ ³µ´”¶

·
³ ¸ ™+¹¥ Žº'» Œ 7Ž‘Ž’ Ž”“@• —i“d˜š™>'›œŸžd“PžKFžˆ™¡ 
³¬w³ ¼ ½ Œ
³¬w³¬N³
¾ ¿ & $1$yÀ¡E.
¾ Á $Â,ÄÃÅ$ÂE+,eE . ! D ! Æ0 ?

Ç
³¬€´ ÈrŒ
³¬€´É¬N³
¾ Ê $Ë$7Ãt?ÌÃt$ÂÍ+* ! ?*Î$ÂÍË2Ï,ÐE. $'&2j,Ñ$ÂE ҚÓ[$Â* ! ?¤,eE3ÔÂ?U*ÎÃÅ?ÕÍÃt?
¾ 2j*ÖD ! ?*Î$ÂÍ 2t?Ì$'&Æ2j,Ä$ÂE
¾¤× 8<#

Ø
³¬[Ù È'ª Ú Œ
³¬[Ù¬N³ ¼ Û7›Ü’)»É 
¾ 8<?Uݨ,Ð*Î? ! 2j,Ñ$ÂE
¾ Þ ?ßÃ2Ï,ÐE>Dà2Ï,Ä$ÂE ͨE+*Î?gD ! 0>Dyá Ê ?
¾ : ! 0b$ *Î?¹âÍÆ?ßÃ-2%ҟ*Î? ! $ÂE¨E¨DF,ÄÃÖÃjDFE ! ?
¾ : ! 0b$ *Î?¹âÍÆ?ßÃ-2%ÒÃjC Í+*ãÓ

ä
³¬…å ½ ÈàŒ
³¬…å¬N³ æ ˜ç©èžd˜š™¨™>3žP˜ç©
¾ Þ ,_Ã-2ÏDFE ! ?êéi? ! 2t$Â*D Ê .Â$3*Ö,o2j0¨C
¾ EÆ$ DFÍ 2j0Æ?UE32j, ! Dr2j,Ä$ÂE
³¬…å¬K´ ›µÛ7›’»¯ 
¾ ë D Ê ÃÅ? Þ é
¾ C ,ÄÃì,eE ÓK$3*ÖC Dr2j,Ñ$ÂE &>*$F&;DÛ.ËDà2Ï,Ä$ÂE

í
³¬€î ï ±Œ £
³¬€îɬN³
¾Ìð ?gDFñ $3*<Eb$ DFÍË2j0b?UE32j, ! Dr2j,Ñ$ÂE
¾ ò ,eE+ñ ¿ 2ÏDr2t? ó ò ,ÐE¨ñ ô@&ÜÝ>Dr2t?àõöD Ê .Â$3*Ö,o2j0¨C

÷
³¬[ø ù ú Œ
³¬[ø¬N³ ú ™¡ yž€©è˜
¾ =²$ ÃÅ?¹âÍÆ?UE ! ?¤E ͨC áµ?U*ûÃ
¾ #<0Æ? ! ñÂÃìͨC $'&2j,Ñ$ÂE¨D Ê
³¬[ø¬K´ ¼ Û7›Ü’)»É 
¾ ¿ $Âͨ* ! ? ¿ &µ$Ë$‘À;E .
¾ 8<?¹& Ê D¹(
¾ #%$3E32t?UE32²C $Ý+,/À ! Dr2j,Ä$ÂE

ü
³¬{ý þ ª Œ
³¬{ýè¬N³ ú ™¡ yž€©è˜
¾ ÿ ÒPA@D¹( D7E¨ÝÆÃì0>D7ñ7?
¾ 8

?ßÃ2j,eC Dr2j,Ñ$ÂE
¾ ¿ÆÊ $gA Ã2 D7*ã2
³¬{ýè¬K´ ¼ Û7›Ü’)»É 
¾ ¿ ?¹âÍÆ?UE ! ?Õ=ͨC áµ?U* × -2 2ÏD ! ñ
¾ ¿ ?ßÃÅÃì,Ä$ÂE 0¨, ÖD ! ñ1,eE .
¾ ¿ (+E × 2-2ÏD ! ñ


 Client Server
Listen
Connect
SYN,X,- (passive open)
(active open)

Half-open
Connection SYN/ACK,Y,X+1
Half-open
Open Connection
Connection ACK,X+1,Y+1

Open

 
 ·  !"$#&%'")(+*,  ".-.
Connection

/
³¬10 È32 Ú Œ
³1¬ 0¬N³
¾ =²$ × #45Ã
¾ =²$5û$Â,ÐE DFÍ 2j0b$3*Ö,76rDr2j,Ä$ÂE
¾ ë ,e*Î?BA@D ÊÐÊ áÂ(Æ&;DÛÃÅà Ô+,eD 2jͨE+Eb? Ê

·8
³¬[­ ú ¸ ±
³¬[­¬N³ ú ™¡ yž€©è˜
¾
*Î?¹? ¿ 2j*-Í ! 2jͨ*Î?UÝ =DFC ?ßÃt&¡D ! ?
¾ ²$FÃ-2–E>DFC ? ÒP2t$‘Ò9 Á DFݨÝ+*Î?ßÃÅÃö2j*Î?¹?
¾ 9 Á DFÝ+ݨ*Î?ßÃÖÃÒd2t$‘Ò²$FÃ-2–E>DFC ?52j*Î?¹? óP,ÐE3Ô)?U*ûÃÅ?â Íb?U*-,Ä?ßà õ
¾ =²$ ?UE ÓK$3* ! ?¤*Î? Ê Dà2Ï,Ä$ÂEÃj0+,Ñ&bÃáµ?B2ãA<?¹?UE 2j*Î?¹?ßÃ
³¬[­¬K´ ¼ Û7›Ü’)»É 
¾ ë $Â*ã.Â?UÝ Þ = ¿ ?UE'2Ï*-,Ä?ßÃ
¾ 9NE3ÔÂ?U*ÎÃÅ?2j*?¹?Ì?UE32j*-,Ñ?ßà ҟ* ! $ÂC C DFE¨ÝÃ
¾ #%$3E32ÏDFC ,ÐE>Dr2j,Ä$ÂE $7Ó Þ = ¿ ! D ! 0b?
¾ ëÉÊ $1$Ý Þ = ¿ Ãt?U* Ô)?U*
¾ #%$3C C $ÂE ! $ÂC &µ$ÂEÆ?UE32ÅÃ,ÐE EÆ$ÂEËÒ ë :Þ = Ò2j*ÖDF, Ê ?U* ! $ÂC & Ê ?B2j,Ä$ÂE

·Ð·
³¬w³<; ±Ú þ Œ
³¬w<³ ;¬w³
¾ ë *Î$ÂC À¨? Ê Ý Eb$y2DFÍ 2j0Æ?UE32j, ! Dr2t?UÝ
¾ ÃÅ?UE¨Ý+C DF, Ê ÒŸ*-ͨE DÛÖ*Î$Ë$y2
¾ = 9 = : ?? >+? ! Í 2ÏDyá Ê ?ßÃ
¾ = 9 = : ,eE32t?U*Î&¡*Î?B2t?UÝ Ýb$ ! ͨC ?UE'2tÃ
¾ = 9 = : á¡AÍ @ ?U* $gÔ)?UC* B¨$gA

·/Ç
³¬w³ ³ ‘™¡“P˜ç™+
³¬w³ ³¬w³
¾ &¡D‘ÃÖÃ-A<$Â*-Ý ??>b& $FÃÅ?UÝ ,ÐE 2j*ÖDFEÃj,o2
¾ 2j*ÎD$ -DFE 0Æ$Â*ûÃt?52t? Ê EÆ?B2²ÃÅ?U*ãÔÂ?U*

·oØ
³¬w³ ´ ¸ þ Œ
³¬w³ ´ ¬w³
¾ 8<?ßÃÅ?B2Ö2j,ÐE. 2j,eC ?

·ä
³¬w³;Ù E ˜š©™¡
³¬w³;Ù¯¬w³
¾ À¡E .Â?U*<Dà2Ö2ÏD ! ñ ód*Î? ! $ÂE¨E¨DF,_ÃÅÃjDFE ! ?àõ
¾ À¡E .Â?U* á>AÍ @ ?U*ö$gÔÂ?U*FB¨$gA

·/í
³¬w³+å ½ Œ ª ›˜¢ G Ž”‘IH ›JGKG%™>
³¬w³+嚬w³
¾ =–Í ÊÐÊ D7Í 2j0b?UE32j, ! Dr2j,Ñ$3E Ó[$Â*<DFEb$ÂE'(+C $ÂÍÃ<ÃÅ?U* Ô+, ! ?ßÃ
¾ Lw× Í 2j0b?UE'2Ï, ! Dr2j,Ä$ÂENM ! $ÂEÆÃì,_Ã-2ÅÃ$yӟ.1,oÔ+,ÐE. 0Æ$FÃ2-Ò E>D7C ?3OºE ͨC U? *-, !
ô 9 Þ ORQS9 Þ
P
¾ ,ÐE¨Ý+,e*Î? ! 2 ! D ÊeÊ Ã

·o÷
 ³¬w³ î ¸ ÈF±
T ? ÊeÊ $gA Á DÛ.Â?ßÃÃÅ?U* Ô+, ! ?
¾ U ?B2 ! U &;D‘ÃÖÃ-A5Ý À Ê ? D !¹! ?ßÃÅÃ
¾ 0Æ$FÃ2DFÝ+ݨ*Î?ßÃÖÃö2ÏDyá Ê ?
¾ &>Íbá Ê , S ! V &¡*-,oÔ'Dr2t? ñ7?B( ݨDr2ÏDyá;DÛÃt?ßÃ<Ó[$Â* tà ? ! Í+*?Õ8 Á #
¾ *Î?UÝ+,e*Î? ! 2<2t$ Ӏ*ÅD7Í¨Ý¨Í Ê ?UE'2–á;D ! ñ1Íb& =W9 ¿ ÃÅ?U*ãÂÔ ?U*
¾ áµ$7.1ÍÖ*Î?¹& Ê ,Ñ?ßÃ

·ü
³¬w³;ø ¸ £ ±
³¬w³;ø¯¬w³
¾ ë , Ê ?Õ0¨DFE¨Ý Ê ? X ! D‘&;Dyá>, Ê ,/2 (
¾ *Î?BÔ)$ ! Dr2j,Ñ$3E ,ÐC &µF$ ÃÖÃj,Äá Ê ?

·
³¬w³ý þ £þ Œ
¾ C ,Äà ! $ÂE Àb.1Í+*Î?UݖҵDFEÆ$ÂE3(bC $ÂÍÆÐ$gÔÂ?U*ãA5*-,o2t?$7Ó U ?B2 ! U &;DÛÃÅÃA5ÝYO ?B2 ! 9
¾ C ,Äà ! $ÂE Àb.1Í+*Î?UÝ Ò DFEÆ$ÂE3(+C $ÂÍÆò*?gD7Ý $7Ó U ?B2 ! U &¡D‘ÃÅÃA5ÝYO ?B2 ! 9
¾ áµ$Ë$‘2<Ô+,eD á>*Î$)DFÝ ! DÛÃ-2Z
ë
Á ҟ*Î? ! $ÂEËÀ+.)ͨ*Î?

·/
³¬w³[0 £þ Œ
¾ *-Í+E D‘Ö*Î$Ë$‘2
¾ Ý+*Î$'& áµ$&>
¾ C ,ÄÃ ! $ÂE Àb.1Í+*Î?UÝ çÒ À Ê ?$gÔ)?U* A5*-,/2t?
¾ C ,Äà ! $ÂE Àb.1Í+*Î?UÝ ÒçÀ Ê ? *Î?gDFÝ
¾ C ,Äà ! $ÂE Àb.1Í+*Î?UÝ ÒçÀ Ê ? & ?U*-C ,_ÃÖÃj,Ä$ÂEÆà ! 0¨DFE.Â?

Ç)8
³¬w³;­ \ \ \
¾¤× &¨& Ê ?B2ÅÃ]O ! $ Ýb?¤Ýb$gA5E Ê $)DFÝÃöA5,o2Ï0Æ$ÂÍ 2 = 9 # $Â* = × #
¾ Á $Â,eE'2ì?U*ûà A5,/2j0 ?UC á ?UÝ+Ýb?UÝ À Ê ?ÕE¨DFC ?ßÃó€ÃÅ?U* Ô)?U*i2j0+*?gDà2Bõ
¾¤× Eb$ÂE3(bC $ÂÍà ë
Á ÃÅ&;D ! ?%Ãj0¨DF*Î?UÝ A5,/2j0 ð ð ð ÒèÝ+*Î$'& V *-Í+E
¾ # QS9à ! *-,Ä&Æ2ÅÃ*-ͨE DÛÃÃt?U* Ô)?U*^OËA5,o2j0 &µ$gA<?U*ãÓˆÍ Ê ,eE32t?U*Î&¡*Î?B2t?U*ûÃg9e9S9e9

Dž·
³¬€´_; ` ³³
¾ ôÃt?U*ö0b$FÃ2D ÃÅ?U* Ô)?U*
¾ ! $1$ÂñË,Ä?ßÃ

ÇÐÇ
´ £ ž{7™+¥ ›“P“d 
¤
a D7*Ö*-,Ä?U*²Dr2@,eE'2ì?U*-E¨D ÊbU ??>2t?U*-E>D Ê Eb?B2 A<$Â*-ñ e, E'2ì?U*ãӈD ! ?
¾ D Ê A@D¹(Ã@,eE3ÔÂ$Âñ7?UÝ
¾ $3E Ê ( D7Í 2j0b$Â*-7, 6U?UÝ 2Ï*ÖDdc ! C D¹( &;D‘ÃÖÃfe
¾ 2ÏDFC & ?U* Òw&¡*Î$Ë$7Ó
´ ¬w³ Œ Ž”“Pž{’bžˆ™¡ 
¾¤× ÊeÊ 2j0>Dr2,_ÃEb$y2¯?? >b&¡*Î?ßÃÅÃ Ê ( &µ?U*ÖC ,/2-2t?UÝ _, ÃèÓK$3*á>,eÝ+Ýb?UE óQÌ?U*-C 7D E¡õ
¾¤× ÊeÊ 2j0¨Dr2²,ÄòEb$y2?? >+&>*?ßÃÖÃ Ê ( Ó[$Â*Îá¡,ÐݨÝÆ?UE Ä, Ã<& ?U*-C ,o2-2t?UÝ ó ë *Î?UE ! >0 õ
¾ g *ÖÝÆ?U* ! $3ͨE32ÅÖ,ÐE 2Ï0Æ?*ÖÍ Ê ?ßÃ

ÇÑØ
´ €¬ ´ þ–™¡’)«˜ižih¯—š™> 
e'9 ¿ ?U* Ô+, ! ? ! $ÂE32j*Î$ Ê
4Æ9 Þ ,Ð*? ! 2j,Ä$ÂE ! $ÂE32j*Î$ Ê
ÿ 9'ôÃt?U* ! $ÂE32j*Î$ Ê
j 9 a ?U0>D¹Ôb,Ñ$Â* ! $ÂE32j*Î$ Ê

Çä
´ ¬[Ù þ klG ™¡  Žnm£¤ž{7™+¥ ›“P“d 
´ ¬[Ù¬N³ Œ ›’»™+ £žP“K‘™¡' 
¾ 9 Á ÃÅ$Âͨ* ! ?3O+ÝÆ?ßÃ-2j,ÐE>Dr2j,Ä$ÂE
¾ Á *Î$y2t$ ! $ Ê
¾ ÃÅ$ÂÍ+* ! ?3OÆÝb?ßÃ2Ï,ÐE>Dà2Ï,Ä$ÂE & $3*ã2Õó€Ãt?U* Ô+, ! ?àõ
¾ &¡D ! ñ7?B2 Ê ?UE .F2j0
¾ &¡D ! ñ7?Bo2 BµDr.3Ã
¾ &>*-,Ñ$Â*-,o2ã(
¾ Ӏ*ÖDÛ.1C ?UE'2 Dà2Ï,Ä$ÂE
¾ 0Æ?gDFÝb?U* $'&2Ï,Ä$ÂEÃ

ÇÐí
´ [¬ Ù¬K´ Œ 7Ž<pšžˆ™¡ 
¾ D‘&¨& Ê , ! Dr2j,Ñ$ÂE Ê D¹()?U*óˆ$Â*ÍÆÃ2@áµ? Ê $gA Ò ¿qg #4 ¿ õ
¾ ,ÐE32t?U*Î&¡*Î?B2 ! $3E32t?UE32

ÇÑ÷
´ [¬ Ù¬]Ù 2 —›'¢i 
¾ #%$3C & Ê ??> &¡*Î$&>(
¾ 0+,ÄÃ2t$Â* ( U Ã2ÏDr2t? Ò á¡D‘ÃÅ?UÝ
¾ ÍÃt?Ur* 9 Þ
¾ ÍÃt?U*%0¨,_Ã2ì$3*ã(
¾ 2j*ÖdD c ! Ã2ÏDr2t?
¾ 2j*ÖdD c ! &>*$F& ?U* 2j,Ñ?ßÃ
¾ ?UE ! * (Æ&Æ2j,ÐE. .ËDr2t?BA@D¹(

Çü
´ …¬ å ª ›ts ™¡›µ7 
¾ = ,ÐE¨,ÐC D Ê ! $ÂEËÀ+.)ͨ*ÖDr2j,Ñ$3E
¾ Þ ,_ÃÏDyá Ê ?êA5*-,/2t? D !¹! ?ßÃÅÃ
¾ 8²Í Ê ?¤$3*ÖÝÆ?U*
¾ g E Ê ( D !¹! ?ßÃÅÃö2t$ = Ugð

Ç)
´ €¬ î £ ž{7™+¥ ›“P“ª Ž”˜lEŸ©”—F›µFžˆŽ”˜ 
¤
¾ ë , Ê 2t?U*Ö,ÐE. 8$3Í 2t?U*
¾ ë , Ê 2t?U*Ö,ÐE. 8$3Í 2t?U*ŸA5,o2j0 a D‘Ã2Ï,Ä$ÂE @$7Ã-2
¾ ë , Ê 2t?U*Ö,ÐE. 8$3Í 2t?U* U a D‘Ã2j,Ñ$3E @$FÃ2A5,/2j0 ¿ ¹? &;DF*ÖDr2t? ò× =
¾ ¿ D ! *-,/À ! ,eD ÊÊ D7C á $ÂE ò× =
¾ Þ Í>D ʐë ,Ð*?BA@D ÊÐÊuU a D‘Ã2j,Ñ$3E @$7Ã-2A5,o2j0 Þv= w

Ç)/
 Internal Bastion
Host Host
External Packet External Packet
Network Filter Network Filter Internal
Host
Information Internal
Server Host Information Internal
Server Host

Single Packet Filter Packet Filter with Bastion Host

Packet
External Packet External Packet Filter
Network Filter Network Filter
Internal
Bastion Bastion Host
Host Internal Host Internal
Host Host
Information
Server Internal Information
Host Server

Dual Packet Filter with

Packet Filter/Bastion Host
Bastion Host in DMZ

ix
.+ Çy  x".zz F{ (y|+
.+")} { (+,
with Separate LAN

Ø.8
´ [¬ ø 2 ™<H žd˜iž5þ3— à‘™¡¢ 2 —›'¢ ~ › r™ ¦ 2 þ 2 ~ ¶
¾ QÌ?UC Ãt$FÃ × e g &µ?U*ÅDà2Ï,ÐE. ¿ ( Ã-2t?UC
¾ Þ Í>D Ê C $ÝÆ? óP*-Í+E DFE¨Ý DFÝ+C ,ÐE¨,_Ã-2t?U*Åõ
¾ #Dà2ì?I.3$Â* ( Ê Dyáµ? Ê & ?U* ÃjÍÆá¡Eb?B2
¾ #<* (&Æ2t$7.1*ÖDy&>0¨, ! ÃÅ?gD Ê &µ?U*%ÃjÍÆá¡EÆ?B2
¾ #<* (&Æ2t$7.1*ÖDy&>0¨, ! ÃÅ?gD Ê &µ?U* é Á = &;D7,e*
¾ ¿ $Âͨ* ! ? U ÝÆ?ßÃ-2 9 €Á U &µ$Â* 2À Ê 2ì?U*-,ÐE.
¾ M9wE'Ô+,_Ãj,Äá Ê ‚? M ,ÐE 2t$'&µ$ Ê $7.F(

Ø·
 Internal Internal
Router Host Host
External
Router
Network Internal Internal

...
GTGB Router Host Host
Information
Server
Internal Internal
Router Host Host

 
 Ø+Cƒ„…ƒ„† |+‡")zxz

ØeÇ
´ {¬ ý £¤ž{7™+¥ ›“P“ª ›JG›œŸžd“Pž€Fž€™¡ 
¾ ¿ ,eE . Ê ? ! 0b$Âñy?&µ$Â,ÐE32
¾ ¿ ,eC & Ê ,/À¨?ßòÃÅ? ! ͨ*-,/2 ( DFݨC ,eE+,ÄÃ2j*ÅDà2Ï,Ä$ÂE
¾ Á DF* 2²$7ÓÝÆ?IÓK?UEÃt?¤,ÐE ÝÆ?¹&Æ2j0
¾¤× ͨݨ,o2 U D Ê DF*-C Ã
¾ #%$3E3Ô)?UE¨,Ä?UE32öÓK$3*@= ×
ˆO ¿ = = Á
¾ 9 Á Ãt? ! & Ê Dr2ÖÓK$3*ÖC
¾ é Á =
¾ #D7E &¡*Î?BÔ)?UE32Ãt$3ͨ* ! ?¤DFݨÝ+* ÃÅ& $1$yÀ¡E.
¾ #D7E &¡*Î?BÔ)?UE32Ãt$3ͨ* ! ?*$3Í 2j,eE . Dà2Ö2ÏD ! ñ3Ã
¾ #D7E &¡*Î?BÔ)?UE32ÃjC Í+*ãÓÉDr2-2ÏD ! ñ
¾ #D7E &¡*Î?BÔ)?UE32ö2j,eE3( Ӏ*ÖDÛ.1C ?UE32@Dr2-2ÏD ! ñ

ØÐØ
´ 1¬ 0 £¤ž{7™+¥ ›“P“W‰–ž H ž€7›µFž€Žè˜ 
¾ #D7EYŠ 2&¡*Î$y2t? ! 2–,_ÓèA50b$ Ê ?Ì& ?U*-,ÐC ?B2t?U*Eb$‘2<À¡*Î?BA–D ÊeÊ ?UÝ
¾ #D7YE Š 2&¡*Î$y2t? ! 2–Ý>Dr2ÏD $ÂÍ 2ÅÃì,eÝÆ?¤&µ?U*-,eC ?B2t?U*
¾ #D7YE Š 2&¡*Î?BÔ)?UE'2²ÃÅ$ÂC ? Þ $ ¿ Dr2-2ÏD ! ñÂÃ
¾ #D7YE Š 2&¡*Î?BÔ)?UE'2,ÐE32t?U*ÖE¨D Ê Dr2-2ÏD ! ñÂÃ
¾ #D7YE Š 2&¡*Î?BÔ)?UE'2<2jͨE+Eb? ÊÐÊ ,ÐE.
¾ #D7YE Š 2&¡*Î?BÔ)?UE'2<Ô+,Ð*-ÍÆÃÅ?ßÃ
¾ Ê ,Ðñ7? Ê ( 2ÏDF*ã.Â?B2

Øä