Now that we have the network setup, its time to setup some basic firewall rules to ensure that users are not able to pivot into our main network.
I also have created a VPN server to enable users from external networks to practice pentesting the network together with me. I'll be creating another rule for that network as shown below.