Complete examples: what it is, what you do, what you need, how to test it and how to close it. Copy one, change a part, keep the test.

A repeatable working

The Mars Firewall Ward

A security banishing: three rules, one test and a close.

What it is

To make a real boundary on a real system and treat it as a ward.

Choose one boundary that matters — a firewall rule, a permission, a blocklist. Write three rules, test them, and close with a record. Use Mars and Fire. The working is the test, not the intention.

How to do it

  1. Name the boundary and what it protects.
  2. Write three rules, each with a reason.
  3. Test each rule by trying to violate it.
  4. Log the rule, the test and the result.
  5. Remove any rule that does not hold; do not keep a decorative ward.
  6. Close with a note and a normal day.

What you need

  • A system with a rule boundary
  • Three rules
  • A test plan
  • A log
  • A closing note

A worked example

Three rules on a small server: deny telnet, deny a blocklist, allow SSH from one address. Each is tested; the telnet rule holds, the blocklist fails on one entry and is corrected.

How you know it worked

A rule that has not been tested is not a ward. Try to break each one and record the result.

Variations

  • Use a personal blocklist instead of a network firewall.
  • Make the ward a social boundary: three rules for a group chat.
  • Run it on a Tuesday at the Mars hour.
Code sketch

This is a sketch, not a runnable program. It names the shape of the automation; the definitions are yours.

rules = [
  { action: 'deny', port: 23, reason: 'no plaintext admin' },
  { action: 'deny', from: 'blocklist', reason: 'known abuse' },
  { action: 'allow', from: 'admin', port: 22, reason: 'maintenance' },
]

Related entries

Constructs

One of 110 entries in the Technomancy workshop. How a working is built Is it wrong somewhere?

Mentioned by 6

Every entry that names The Mars Firewall Ward, grouped by section.

⌬ Correspondences 3

⚙ Instruments 1

✧ Practices 1

❖ Workings 1

More in Workings

The entries either side of this one in the same section.

All of Workings →

New entries, when they land

Occasional notes when a section of the grimoire is added or revised. No account, no tracking across sites, and one line to leave.

Grimoire updates only. Nothing is shared. Every note has an unsubscribe link.