I'm about to do my head in if I read another page of theory. I've got a lab box set up here running RHCE6 and on a little private network ready for the breaking.
If anyone's feeling destructive and has a couple of minutes, contact me for the SSH details, log in and do some (limited) damage. Poweroff the machine when you've done your thing and I'll fix it.
For the moment I need to focus my skills on the following things:
- iptables
- selinux
- routing issues