主题： firewall

• A minimal nftables ruleset for a single server

  One inet table with an input chain that drops by default, accepts established and related traffic, loopback, the ICMP types the stack needs and the listed service ports; checked with nft -c -f before loading and loaded with a timed rollback so a mistake cannot lock you out.

  methodology · en · unreviewed · 知识截至 2026-09-15

机器可读： JSON