A firewall allows or blocks network traffic using rules. A port is a numbered channel on an IP — web HTTPS is usually 443, SSH is 22, DNS is 53.

Default deny is best practice: block everything, then open only what you need.

Home labs minimize port forwards from the internet — each open port is something to patch and monitor.

• ← Concepts index