RHEL 8, RH134, Chapter 13, Lesson 4 - STRONGLY suggesting a change

[Tracy_Baker]

RHEL 8, RH134, Chapter 13, Lesson 4 - Comprehensive Review, part 3

I'd suggest that a change is made to this step:

Instead of blocking 172.25.250.10/32 altogether, change it so that SSH (as a service) is added into the block zone.

Two reasons:

1. It still accomplishes the goal (it even says SSH in the instruction) -- and the grading script still accepts it as a solution.
2. It allows the step that follows (fixing some Apache issues) to be tested from servera

If left as-is, Apache cannot be tested from servera because the firewall rule blocks all access from servera's IP address.

I preach to my students that they should test everything they do. Because, as we all know, there are no grading scripts in real life.

[rhello]

Agreed.  The provided answer seems like a very big-stick approach to achieving the objective.