Security lab · Firewall Defense

Firewall Defense Hold the line. Keep the office online.

Block hostile connections. Keep legitimate office traffic moving.

  • 8 waves
  • 3 shields
  • 4 firewall rules
  • ← block · → allow
The office network & how to play
Internet
Youthe firewall
Office
  • The office network (10.0.0.x): staff PCs (anna-laptop, reception-pc, dev-laptop…), a printer (printer-2f), a lobby camera (cam-lobby) and the office DNS server (10.0.0.2), which filters lookups
  • web01: your public website. Ports 80 and 443 are open on purpose, and you can read its web requests
  • nas01: the Windows file server, for inside use only (it backs up to the cloud each night)
  • The VPN (vpn01, WireGuard): open to the internet, so the admin and remote staff can get in. Once connected they show as 10.8.0.x
  • Block (or press ← / A): the packet stops at the firewall
  • Allow (or press → / L): it goes through now. If its timer runs out, it goes through by itself: an attack that slips in costs a shield
  • 3 shields. An attack that gets in costs one, and so does real traffic you block. Wave 1 is a warm-up: mistakes there cost no shield. A wave with no mistake earns a bonus and gives a lost shield back.
  • 8 waves. After waves 1, 3, 5 and 7 you pick a firewall rule: it stops the obvious attacks of its kind by itself; disguised ones still need you. Waves 4, 6 and 8 are incidents.
  • Look at where it comes from, where it goes, which program sends it and what it is doing. A known service isn't safe by itself.
  • Your best run of the day earns shared XP (up to 400) for your level and weekly league.

Back
Top