advanced·20 min·付费
Egress Filter on the Records Server
An outbound filter permits the wrong department and blocks the right one.
场景
Halstead Legal restricts which departments may reach the records server, applied where traffic leaves the firewall towards that server rather than where it enters. A policy rewrite named the wrong department: the paralegal team has lost its access, and the contractor network - which should never have had any - now reaches records freely. Correct the filter so only paralegals get through.
学习目标
- acl
- nftables
- egress filtering
- troubleshooting
拓扑与配置
此环境包含 4 台设备（3 Hosts, 1 Router）。你将配置并排查上方列出的网络技能。