@stephen@microbe.vital.org.nz @markmcb@mas.to Very interesting firewall settings. Thanks for sharing them. Question into the void: is there a “menu-style” FOSS #firewall setup for #NixOS —prebuilt profiles with different strictness levels one can apply and test? I’m running #Suricata #IDS, but I don’t have a systematic way to validate #firewallpolicy beyond “tweak until it works.” I’d love a repeatable approach to reach a good protection baseline with minimal site access #breakage .