Free tool · 🧱 Firewall rules generator
Default deny.Admin-only SSH.
The baseline every server should have before it goes on the internet, in the syntax of your firewall.
Keep a second session open while applying. Add your office/VPN IP before locking SSH.
What it checks
Everything we would look at first on a client call.
Free, no sign-up, no email gate. If the report shows red, the fix is written next to it — and we are one click away if you would rather we did it.
- Default-deny inbound, allow outbound
- Service ports and admin-only management access
- Rate limiting on SSH, logging of drops
- Persistence commands for each tool
FAQ
Common questions
ufw or nftables?
ufw is a friendly front end (Ubuntu). nftables is the modern kernel firewall; use it on servers you manage closely.
What about the cloud security group?
Both: cloud SG at the edge, host firewall on the server.