# ufw - firewall wrapper
# nftables - backend of firewall
# openssh - ssh tool
paru -S ufw iptables-nft openssh

# set firewall rules
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw limit ssh # limit alows only 6 connections per 30 secs
sudo ufw allow http
sudo ufw allow https
sudo ufw allow ftp

# start ufw
sudo systemctl enable ufw
sudo systemctl start ufw
sudo ufw enable

# commands (reference)
sudo ufw allow <port>
sudo ufw allow from <ip>
sudo ufw allow from <ip> to any port <port>
sudo ufw disable # stop firewall