advanced·20 min·Paid
Egress Filter on the Records Server
An outbound filter permits the wrong department and blocks the right one.
Scenario
Halstead Legal restricts which departments may reach the records server, applied where traffic leaves the firewall towards that server rather than where it enters. A policy rewrite named the wrong department: the paralegal team has lost its access, and the contractor network - which should never have had any - now reaches records freely. Correct the filter so only paralegals get through.
Learning objectives
- acl
- nftables
- egress filtering
- troubleshooting
Topology and configuration
This environment contains 4 devices (3 Hosts, 1 Router). You configure and troubleshoot the networking skills listed above.