advanced·20 min·Kostenpflichtig
Egress Filter on the Records Server
An outbound filter permits the wrong department and blocks the right one.
Szenario
Halstead Legal restricts which departments may reach the records server, applied where traffic leaves the firewall towards that server rather than where it enters. A policy rewrite named the wrong department: the paralegal team has lost its access, and the contractor network - which should never have had any - now reaches records freely. Correct the filter so only paralegals get through.
Lernziele
- acl
- nftables
- egress filtering
- troubleshooting
Topologie und Konfiguration
Diese Umgebung enthält 4 Geräte (3 Hosts, 1 Router). Sie konfigurieren und beheben Fehler bei den oben aufgeführten Networking-Fähigkeiten.