Post #3024020

@hailey@hails.org The one gotcha with network hardening that I discovered the hard way is that this also affects name lookups if you're doing DNS queries to off-machine DNS resolvers (which is our standard server configuration at work). Systemd-resolved on the local system can fix that, which is (another) reason to consider using it if you aren't already.