Lesson 4 of 13 · Shrinking the surface
Firewall — nftables and firewalld with a "deny all" policy
Objective
Put in front of every service a firewall that denies everything by default and opens only what is justified, with nftables (Debian, Ubuntu) and firewalld (Rocky), testing the configuration before applying it.
This lesson is part of the full course
Unlock Linux Server Hardening to read every lesson, do the exercises, access the simulations and earn your certificate.
Already enrolled? Log in.