← Lock down a host with nftables

Solve in your browser

Edit the files below. The Objectives tick green live as you work. Hit Check when they all pass and your verified proof page is issued automatically.

Objectives

  • Met: SSH (22) is allowed from the admin subnet (10.0.0.0/24)
  • Not met: SSH is dropped from the public internet
  • Met: HTTP (80) and HTTPS (443) are open to everyone
  • Not met: Everything else (e.g. a stray 3306) is dropped

2 of 4 objectives met.

Objectives update live as you edit. Hitting Check commits your proof.

No account needed to explore. When you're ready, browse the rest of the challenges or sign in to save a solve as a verified proof.