advanced·20 min·有料
Egress Filter on the Records Server
An outbound filter permits the wrong department and blocks the right one.
シナリオ
Halstead Legal restricts which departments may reach the records server, applied where traffic leaves the firewall towards that server rather than where it enters. A policy rewrite named the wrong department: the paralegal team has lost its access, and the contractor network - which should never have had any - now reaches records freely. Correct the filter so only paralegals get through.
学習目標
- acl
- nftables
- egress filtering
- troubleshooting
トポロジーと設定
この環境には4台のデバイス(3 Hosts, 1 Router)が含まれます。上記のネットワーキングスキルを設定し、トラブルシューティングします。