If ctf365 wanted to keep the playing field level, they could sandbox the entire network so that attacks originate from another device on the network. So you hav

If ctf365 wanted to keep the playing field level, they could sandbox the entire network so that attacks originate from another device on the network. So you have: -----------------Network----------------------------------- my_fortress <- targeted by: competitors_command&control_box my_command&control_box :targets -> competitors_fortress ----------------------------------------------------------- No shady traffic ever needs to traverse the public internet. Only ssh access to my_command&control_box and my_fortress is required. This has the added benefit of normalizing the attacking horsepower of the entrants.