Explanation This firewall rule set allows a subnet to only access DHCP, web pages, and SFTP, and specifically blocks FTP by allowing or denying traffic based on the source, destination, and port. The rule set is as follows: Allow any source and any destination on port 80 (HTTP) Allow any source and any destination on port 443 (HTTPS) Allow any source and any destination on port 67 (DHCP server) Allow any source and any destination on port 68 (DHCP client) Allow any source and any destination on port 22 (SFTP) Deny any source and any destination on port 21 (FTP) Deny any source and any destination on any other port