UFW configuration

To enable UFW :

# dinitctl enable ufw
# ufw enable

Deny all incoming traffic by default, allow outgoing :

# ufw default deny incoming
# ufw default allow outgoing

Open needed ports, here an example with SSH :

# ufw allow ssh

Common ports are ssh, http, https, dns, etc...

You may also limit SSH connections against brute-force :

# ufw limit ssh

Then reload UFW :

# ufw reload