Lesson plan

Firewalk (computing)

Firewalking is a technique developed by Mike Schiffman and David Goldsmith, utilizing traceroute techniques and TTL values to analyze IP packet responses in mapping networks and determining gateway ACL filters. It is an active reconnaissance network security analysis technique that attempts to determine which layer 4 protocols a specific firewall will allow. Firewalk is a software tool that performs Firewalking. To protect a firewall or gateway against firewalking, one can block outgoing TTL messages to avoid exposing information about your network. Additionally, using Network Address Translation is useful in hiding internal network addresses.

Back to article

Article summary

Firewalking is a technique developed by Mike Schiffman and David Goldsmith, utilizing traceroute techniques and TTL values to analyze IP packet responses in mapping networks and determining gateway ACL filters. It is an active reconnaissance network security analysis technique that attempts to determine which layer 4 protocols a specific firewall will allow. Firewalk is a software tool that performs Firewalking. To protect a firewall or gateway against firewalking, one can block outgoing TTL messages to avoid exposing information about your network. Additionally, using Network Address Translation is useful in hiding internal network addresses.

Key claims

No claims recorded.

Discussion questions

  1. Summarise the article in your own words. Which single claim would you verify first, and why?
  2. Which claim in this article is most likely to be revised as the sources update? How would you check its current status?
  3. If two sources disagreed about one of these facts, what would you need in order to trust one over the other?

Bibliography

No sources recorded.

Key claims and bibliography are generated from the same tracked claims and sources as the article page.