Version 1 · Chapter 19Reading mode

Move work remotely and respect access boundaries

By the end: Understand remote sessions, transfers, sync previews, and firewall scope.

The idea

Use a host you own or have permission to administer. Verify a new SSH host key through a trusted channel rather than bypassing verification. A firewall rule can cut off your own session. This lesson previews changes locally; it does not require a server, credentials, or new firewall rules.

Your command toolkit

ssh

What it solves: Inspect SSH settings before connecting.

bash

ssh -G example.com | head -n 12

-G prints evaluated client configuration and normally does not connect. Local Match exec configuration may run commands; inspect your SSH config if it is untrusted.

scp

What it solves: Understand copying a file over SSH.

bash

man scp

A typical transfer names a local source and user@host:destination. Current OpenSSH scp uses SFTP by default; check your installed version and validate both endpoints.

rsync

What it solves: Preview a local synchronization.

bash

rsync -avn source/ destination/

-n is a dry run, -v explains work, and -a preserves a broad set of attributes. A trailing slash on source/ means its contents. Run the lab to create both folders.

iptables

What it solves: Understand lower-level firewall rule management.

bash

iptables --help

Linux installations may use an nftables backend or native nft rules. Identify the active stack before modifying rules; flushing rules is not a diagnostic shortcut.

ufw

What it solves: Understand a higher-level firewall interface.

bash

ufw --help

UFW manages firewall policy on systems using it. Before enabling a real policy, plan required inbound access and a tested recovery route.

Before you move on

Try the guided lab below. Compare the result with the explanation, then record your reasoning in the workbook. A missing optional program or a restricted environment is something to explain, not a reason to change system settings blindly.

Practice with evidence

Predict the result
Run the guided lab
Compare the output
Explain your choice

A worked example

Guided lab

bash

si_lab=$(mktemp -d)
cd "$si_lab" || exit
mkdir source destination
printf 'release notes\n' > source/notes.txt
rsync -avn source/ destination/
ls -A destination
rsync -av source/ destination/
cmp source/notes.txt destination/notes.txt

What to expect: The dry run announces notes.txt but leaves destination empty. The actual local sync creates a matching file. rsync must be installed.

Make it yours: Explain the dry run and the source trailing slash. Write the access and recovery checks you would need before changing a firewall on a remote host.

Read further

Debian reference: network setup ↗www.debian.org

Apply what you learned

Your private practice

Explain the dry run and the source trailing slash. Write the access and recovery checks you would need before changing a firewall on a remote host.

What does rsync -n do?Delete extra destination filesDisable SSH host verificationPreview the transfer without applying it

Answers are private. Completion requires the correct knowledge-check answer and a written response when an activity is included.

Restore a downloaded workbook

Choose a recovery file for this course and version. Review the recovered copy before saving it to your account.

Workbook recovery file

Ask a question or report a problem

Describe what needs attention. Your private answer is shared only if you select the option below.