So let's talk about this.
I was actually this is the redneck's comment I should cover in the next essential section, but we need
to understand how the world works.
So that's why I think this section would be good to introduce you to the evidence.
So we have seen the Windows firewall.
We have seen the program for paneling and broken connections.
That is the same purpose you can do with the IP Dabbous.
But we have to follow some options because it's a command line.
So if you tell tables, it's just coming out front because it's in it's been pointed out that is where
you need to get these IP tables as a route to the future.
My but there was one in which we need the, uh, password and you get a bunch of options here.
So first, I would explain some theory, so to see what are the IP tables that are used in your computer
to minus a minus in the stands for.
And you can see here there are three chains by default in pushing forward and output chip.
So if you have to put any rule, you get in here.
So the input is similar to in in bundles in the underside.
So whatever connections that are coming from outside Internet to this computer will be added here.
So the output chain consists of the connections going from our computer to the external website or any
other computers.
And that chain will be added here that it is similar to the opener's.
So this forward is usually the rotors to forward the packet.
So it will not be seen for that much because it will be using the rotors and for simple computer system.
It is not necessary.
So here you can see in the input input that the default one is xcept so we can browse the Internet and
we can get the data.
I can see the target protocol option, source destination.
So in order to understand this, let me write a simple word for this IP input chain, Soula.
So to add a to specific capitally infrared or appart so to which you need to happen to inputting.
So incoming connections, I want to filter incoming connections and the same minus gear, minus days
for action.
So if you have you can see the actions you need to o you can perform acts of ridicule.
So let's drop.
So this drop simply, uh, discards the packet that are coming to our computer because this is the inputting.
Right.
So if I hit enter now, our rule is that if I say I put was minus cell, you can see uh, there is a
rule at and it says target drop and protocol, our protocols.
So whatever, uh, the sources and whatever their destination or piece, I mean destination, uh interfaces,
uh, computer can have more than one interfaces and to whatever destination and all the protocols will
simply drop the connection.
Let me open a Web browser and let's pipe a good outcome.
So this Web browser keeps rolling in for a treat because we will we can send our open request to the
Web server, but the Google dot com has sent a response.
But the response has been dropped because of this IP, uh, IPTV.
So we are dropping from any source to any destination IP address.
That is our mission and we are just dropping.
So now what we can do is I'm going to delete this rule.
So to do that, let's we need to find a number of these, uh.
We need to sell minus sell, and we need to set the numbers.
So numbers.
As you can see, this is the first rule and the number is one, so using this right number, you can
delete the, uh, I repeat tables and let's, uh, uh, my cap.
Thirty four digit and one.
So I think we need to somebody does something like this in the.
OK, let's delete everything to do that, we need to see if we have stands for fresh, we need to flesh
out the rules.
So if I say minus capital, we we no longer have the rule in our input.
Now, if I go to the browser and if I refer this, we can see guru.com.
This is how you add the input chain.
So there is some more syntax, some more options, you can specify I was minus here happen to the input
chain, I mean, incoming connections and you can also specify the source using mitosis.
So you need to type the IP address.
But first, let me show you Google dot com.
So connections from the source, Google dot com and I can specify the destination, but using minus
one spot and 80 so I can sell minus drop.
So as you can see, uh, if I'm getting any connections from this Google dot com and on the put it through
before defining the what you need to specify the protocol, which is TCP UDP are any other protocol.
Since it wouldn't be the typical protocol, notices would disappear.
So let me explain this one.
So I'm adding a rule to incoming connections rather than incoming corrections are from Google dot com
source.
And the full protocol is PXP with the destination, potentially destination port in the sense of which
it is our.
So Google accounts server sense that the destination would be 30 and what they want to take the action
is drop.
And if I were to my room will be successfully.
Now, I can simply say.
So as you can see here, Rob, PXP options, there are no extra options.
You can see the source.
It is a name, Sagrera of the Guru.com.
So Boulder contains more than one name server, and we get the response from the other animals as well.
If I flip the switch, we can see guru.com.
Know, what I'm going to do is I'm going to, uh, being that being the Google dot com.
So this is the IP address.
Now, what I want to do is I am going to add the IP address instead of the domain name.
So let me say this one.
Now, if I go to the president, if I could enter, so you've still got this, maybe, uh, the our
computer is asking for mininum servers.
So let me go to this.
So this is my card.
You said, well, this is not easy to deal with, me being this one.
All right, now let me copy paste this IP address and this chain.
So now let me go ahead and navigate to this one.
So let me rephrase this.
All right, maybe test Poonam Sarver's.
OK.
I don't know why it's still we are getting.
All right, maybe I have done wrong, but it's the same syntax you need to specify the source and the
port and the destination port minus the drop.
So let me read this.
It would retard.
Now, another thing we need to do is that is the output chain, should I tables, uh, upon the output?
So now we if we want to connect to any Web server, then we cannot connect to it.
So similar minus a source.
This my IP address and the fourth protocol, TCP and Destination Port.
OK, we'll, uh, drop out of the packets on all the ports and let's drop.
So now if we connect to this Web server on the TCP IP protocol on any port, our packet will be dropped.
Now, I think we should not get the.
OK.
Too bad at writing these rules.
Let me try to, uh, specify the interface.
So I'm just I don't know why it's I'm still able to pinging.
So.
So that's about this input output and for a change of fashion, we do not get the response rate, but
later on, I don't know what you are getting the response.
OK, so even maybe I am better writing the rules.
OK, another thing I want to show you is not Abels pseudo IP tables, so you need to respond minus T
and Fernet.
There is a table for that.
And we to say uh minus A.
So, OK, I want to show you this one night stands for our network address translation.
So we have already discussed this and the networking fundamentals, and this is used primarily for saving
the public IP addresses, as you can see how the treatment preloading input output.
We already know input and output.
So what we can do is we can all of this back in, coming back to another port or to another IP address
and the port.
So if any computer is sending any data on the ports vital, there are a range of ports from 5000 to
6000.
No, I can drop those data into some one common Port Said 2000.
So in that way, I can get all of these ports information on one port.
So that is done via this.
First, we need to set up rules and these packets will first verify this chain preloading chain.
So after that, they will go to the post chain then.
Then it will go to the destination we now are redirected to.
So we'll see this configuration in the next video.
Bypassing it was for no, that's only speak to the theory.
Now, I have found this website, which is the card that they have the diagram also.
So we are getting that incoming connections and we are proud of that.
And if you want to deliver to this local address, I mean, in your own computer, but different.
But you can deliver before the shooting or if you do not want to route that packet into your local port,
then you can directly proportional to this outside world.
OK, I will say an example.
Suppose, uh, there is there so take this example again as an example.
This is the village mission, right?
So now I am going to send the packet to my colleague next mission so those packets will go for standard
operating rule.
If we attempt to drop these packets, it will be dropped.
And before preloading, after pirouetting and before posting, no, I can drop this package to my local
processor.
Uh, Netcare, 2004.
So are these data sorry.
Are this data from the Loston can be captured in the network.
Two thousand.
And then I can forward to another computer, uh, Windows XP machine.
So this is a pirouetting and so in coming packets will go into this preloading chain and then if you
want to send it to local port, you can send it.
Otherwise it will go to the post routing rules and then it will go to the actual destination.
You can also stop the process here.
I mean, Pacard, the sending the package here, you can also send it to the Port Authority.
This is the principle.
And the next video, what we are going to do is we are stopping it here.
So that's that this you go.
I hope this might sound confusing, but in the next few days we will do the practical and you will have
much more gratification than this, uh, theory will be.
So I highly suggest you to read this article, and this article is very interesting.
And if you want to set the table for some more computers and like a smart organization and this website
is very much useful.
So that's all for this review.
I hope you have understood.