Egress Filter on the Records Server
An outbound filter permits the wrong department and blocks the right one.
Scenario
Halstead Legal restricts which departments may reach the records server, applied where traffic leaves the firewall towards that server rather than where it enters. A policy rewrite named the wrong department: the paralegal team has lost its access, and the contractor network - which should never have had any - now reaches records freely. Correct the filter so only paralegals get through.
Learning objectives
- acl
- nftables
- egress filtering
- troubleshooting
Topology and configuration
This environment contains 4 devices (3 Hosts, 1 Router). You configure and troubleshoot the networking skills listed above.
Curriculum topics
Environment
Subnetica labs run FRRouting and Linux networking with Cisco-like syntax, not Cisco IOS. Commands and behavior may differ from Cisco devices.
Addressing is regenerated on every attempt and the environment is graded automatically.
Ready to practice?
Sign in or create an account before launching this lab. Viewing this preview never starts or reserves infrastructure.