Permit One Service, Not One Host
Narrow a host-level permit down to the one service it was meant to allow.
Scenario
A security review found that the web servers can open any port on the application server, because the rule permitting the two to talk was written by address at a time when only one service was running. The application server now also hosts the database. Restrict the web tier to the application port only, without disturbing the administrators who legitimately need database access.
Learning objectives
- acl
- nftables
- port filtering
- least privilege
Topology and configuration
This environment contains 4 devices (3 Hosts, 1 Router). You configure and troubleshoot the networking skills listed above.
Curriculum topics
Environment
Subnetica labs run FRRouting and Linux networking with Cisco-like syntax, not Cisco IOS. Commands and behavior may differ from Cisco devices.
Addressing is regenerated on every attempt and the environment is graded automatically.
Certification objectives
- · Objective
- · Objective
Ready to practice?
Sign in or create an account before launching this lab. Viewing this preview never starts or reserves infrastructure.