Topic: firewall

• A minimal nftables ruleset for a single server

  One inet table with an input chain that drops by default, accepts established and related traffic, loopback, the ICMP types the stack needs and the listed service ports; checked with nft -c -f before loading and loaded with a timed rollback so a mistake cannot lock you out.

  methodology · en · unreviewed

Machine-readable: JSON