intermediate·20 min·付费
Overly Broad Firewall Rule
Monitoring system flags guest Wi-Fi reaching the payroll server
场景
The security monitoring platform flagged an anomaly: a device on the guest wireless network successfully connected to the payroll application server. That should not be possible under company policy — guest Wi-Fi is only supposed to reach the Internet, nothing internal. Investigate how this is happening and lock it down without breaking guest Internet access or legitimate employee access to payroll.
学习目标
- acl
- nftables
- least privilege
拓扑与配置
此环境包含 5 台设备（4 Hosts, 1 Router）。你将配置并排查上方列出的网络技能。