Permit One Service, Not One Host

السيناريو

A security review found that the web servers can open any port on the application server, because the rule permitting the two to talk was written by address at a time when only one service was running. The application server now also hosts the database. Restrict the web tier to the application port only, without disturbing the administrators who legitimately need database access.

أهداف التعلّم

• acl
• nftables
• port filtering
• least privilege

الطوبولوجيا والإعداد

تحتوي هذه البيئة على 4 جهازًا (3 Hosts, 1 Router). تقوم بإعداد واستكشاف أخطاء المهارات المذكورة أعلاه وإصلاحها.

مواضيع المنهج

• Network Security and Access Control / Filtering by Service

أهداف الشهادة

• ccna-200-301 · الهدف 5.6: Configure and verify access control lists
• comptia-network-plus-n10-009 · الهدف 4.3: Given a scenario, apply network security features, defense techniques, and solutions