intermediate·20 min·付费
Permit One Service, Not One Host
Narrow a host-level permit down to the one service it was meant to allow.
场景
A security review found that the web servers can open any port on the application server, because the rule permitting the two to talk was written by address at a time when only one service was running. The application server now also hosts the database. Restrict the web tier to the application port only, without disturbing the administrators who legitimately need database access.
学习目标
- acl
- nftables
- port filtering
- least privilege
拓扑与配置
此环境包含 4 台设备（3 Hosts, 1 Router）。你将配置并排查上方列出的网络技能。
课程主题
认证考纲目标
- ccna-200-301 · 目标 5.6：Configure and verify access control lists
- comptia-network-plus-n10-009 · 目标 4.3：Given a scenario, apply network security features, defense techniques, and solutions