#firewallrules

[jessicajazz2000]

Firewall Configuration for Web and FTP Access | Step-by-Step Guide | CertBlaster

Here, you will see how to correctly set up firewall rules to enable complete internet connectivity and FTP communication for a web server. Based on the scenario steps and network diagram, we go through every step to enable traffic through common ports—FTP on port 20 and 21, HTTP on port 80, and HTTPS on port 443—using TCP and UDP where possible. This tutorial assists in solidifying important firewall configuration principles and keeps your web server accessible while ensuring secure and efficient traffic control. Ideal for IT students, network admins, and exam prep!

[sztupy]

The next rule we created was named “../”, and upon deleting that rule, the entire test SQL Server was also suddenly deleted, and we found ourselves in need of a new test server! The cause of the deletion of our test server can be found in the URL to which the DELETE request is sent. The URL the DELETE request was sent to is:  /subscriptions/<subscriptionId>/resourceGroups/<rg>/providers/Microsoft.Sql/servers/test-4ad9a/firewallRules/../?api-version=2021-11-0. The firewall rule name “../” within the URL is treated as if it refers to the parent directory and to the SQL Server itself, which leads to the entire server being deleted.

With a little effort, it’s possible to create a rule that deletes any resource in the Azure tenant with the following name: ../../../../../../../<theResourceURL>?api-version=<relevant_version>#”.

Little Bobby Tables strikes again