Blocking a Single User's Internet Access with iptables: A Lesson in Scoped Firewall Rules

Most firewall thinking defaults to the network level: which IPs, which ports, which subnets. This lab worked at a different, more granular layer entirely, blocking internet access for one specific use