UFW Firewall

What is it?

UFW (Uncomplicated Firewall) is a simple firewall for Linux. It blocks all incoming traffic by default, then only opens specific doors for the services that need them — web traffic (port 80/443), SSH (port 22), and nothing else.

Why does it matter?

Your server is invisible to the internet except for the specific services you're running. No open ports for attackers to probe. Security by default, not as an afterthought.

Benefits

For you

Your server is locked down by default. Only the necessary doors are open. No attack surface from forgotten services.

For the build

Simple to configure. Deny-by-default. Audit-ready rules.