Linux Labs

Networking / Stage 7 of 14

Allow what is needed, keep the block

Not running Starting usually ~20 s
Leave the lesson

Step 6 of 8 · on a machine · 4 min

A rule out of place

The same rules file, but a different mistake in it. Find it from the output of nft and fix it yourself.

The colleague appended a permission for 192.0.2.20 to port 8080 at the end of /opt/firewall-lab/rules.nft and loaded the file. The rule is in the ruleset, yet the request from 192.0.2.20 still hangs.

Exercise · do it

A permission nothing reaches

Make 192.0.2.20 get the site at http://192.0.2.10:8080/health while 192.0.2.30 still waits until the timeout. Keep the rules in /opt/firewall-lab/rules.nft and load them into lab-server from there.

Sign in and start The machine is available after signing in

Goals · 0 of 2

  • Let .20 reach the site without opening it to .30 not done yet
  • Keep the fix in rules.nft not done yet

Step goals

0 of 2
  • Let .20 reach the site without opening it to .30 — not done yet
  • Keep the fix in rules.nft — not done yet
Ubuntu 24.04

Step goals

0 of 2
  • Let .20 reach the site without opening it to .30 — not done yet
  • Keep the fix in rules.nft — not done yet
Loading…