Question

Block any packets heading for Snapgram (IP addresses 203.0.113.5 through 203.0.113.105) from either the Internal or Sales networks.

Block any packets heading into either network from any IP address starting with 43.11.x.x.

Only allow connections to Sales network that originate from the Internal network

Only allow connections from the Sales network into the Internal network and to the cloud backup server on the Internet at IP address 199.87.217.164

Block all other traffic unless otherwise specified

Answer 1

To implement the specified network security rules, we can formulate a set of firewall rules based on the provided conditions. Here's a structured approach to defining those rules.

### Firewall Rules

1. **Block Snapgram Traffic**
- Block all packets from the Internal and Sales networks to the IP address range 203.0.113.5 to 203.0.113.105.
```
DROP all from Internal to 203.0.113.5/29 (that includes 203.0.113.5 to 203.0.113.105)
DROP all from Sales to 203.0.113.5/29 (that includes 203.0.113.5 to 203.0.113.105)
```

2. **Block Incoming Traffic from Specified IP Range**
- Block any packets coming from IP addresses starting with 43.11.x.x into both Internal and Sales networks.
```
DROP all from 43.11.0.0/16 to Internal
DROP all from 43.11.0.0/16 to Sales
```

3. **Allow Internal to Sales Network Connections**
- Allow only connections from the Internal network to the Sales network.
```
ACCEPT all from Internal to Sales
```

4. **Allow Sales Network Connections**
- Allow connections from Sales network to Internal network and to the cloud backup server at IP 199.87.217.164.
```
ACCEPT all from Sales to Internal
ACCEPT all from Sales to 199.87.217.164
```

5. **Block All Other Traffic**
- Drop all other traffic not otherwise specified.
```
DROP all
```

### Summary of Rules in Order of Evaluation
1. **DROP** from Internal to 203.0.113.5/29
2. **DROP** from Sales to 203.0.113.5/29
3. **DROP** from 43.11.0.0/16 to Internal
4. **DROP** from 43.11.0.0/16 to Sales
5. **ACCEPT** from Internal to Sales
6. **ACCEPT** from Sales to Internal
7. **ACCEPT** from Sales to 199.87.217.164
8. **DROP all**

### Implementation Notes
- Ensure that the firewall rules are implemented in the correct order, as firewall rules are generally evaluated from top to bottom. The first matching rule will apply.
- This set of rules should be applied to your firewall device (hardware or software), which might differ slightly depending on the specific firewall solution you are using.
- Always test configuration changes in a safe environment before deploying to production to avoid unintended disruptions.

### Conclusion
Following these rules will help effectively manage the traffic according to the specified requirements while maintaining security across the networks involved.