Tips

• Rules are typically are written in pairs

  • incoming and outgoing

• Log mischievious activity

• Log all denials while debugging

• Only allow services that are needed

Notes: