Configure iptables/ufw rules to implement a basic security policy.
sudo ufw status verbose
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow 22/tcp
sudo ufw allow 443/tcp
sudo ufw enable
sudo ufw status numbered
Why do we default deny incoming but allow outgoing? When might you restrict outgoing too?