Tool
Firewall (nftables / pfSense)
Rule-based network traffic control: L3/L4 filtering, NAT, port forwarding and zones. Foundational layer of any defense-in-depth alongside TLS and authentication.
Key points
- ▸Default-deny on ingress: any port not needed externally is blocked by default.
- ▸Stateful: the firewall tracks connections; replies and related packets flow through without explicit rules.
- ▸Zones and segmentation: isolating DMZ, LAN and management plane limits the blast radius of an intrusion.
Seed content from the CV; pending manual review or Trilium ingestion.