Build a Firewall Baseline

First-Hour Hardening · L2 · 第 3 / 6 节 · 约 8 分钟

Default-deny inbound traffic, allow the required SSH source range, and document every exception. Test from an independent network.

sudo ufw default deny incoming
sudo ufw allow from YOUR_ADMIN_CIDR to any port 22
sudo ufw status verbose