Build a Firewall Baseline

First-Hour Hardening · L2 · 第 3 / 6 節 · 約 8 分鍾

Default-deny inbound traffic, allow the required SSH source range, and document every exception. Test from an independent network.

sudo ufw default deny incoming
sudo ufw allow from YOUR_ADMIN_CIDR to any port 22
sudo ufw status verbose