• Logo
    Ubuntu security documentation
  • documentation.ubuntu.com
  • More resources
    • Discourse
    • GitHub
Contents Menu Expand Light mode Dark mode Auto light/dark, in light mode Auto light/dark, in dark mode Skip to content
Ubuntu security documentation
Ubuntu security documentation
  • Software integrity
    • Ubuntu image integrity verification
    • Ubuntu archive integrity verification
  • Security updates
    • Expanded Security Maintenance (ESM)
    • Ubuntu OVAL data
    • Ubuntu OSV data
    • Ubuntu VEX data
  • Ubuntu security features
    • Overview of security features
    • Platform protections
      • CPU features
      • Devices
      • UEFI Secure Boot
    • Trusted Platform Module
    • Privilege restriction
      • AppArmor
      • cgroups (Control Groups)
    • Cryptography
      • Cloud PRNG Seed
      • Disable Legacy TLS
      • Password Hashing
      • Cryptographic Algorithms
        • Encryption libraries in Ubuntu
        • Algorithms per Ubuntu release
    • Process and memory protections
      • Default compiler and linker flags
      • File Handing
    • Kernel protections
    • Storage and filesystem
      • File Encryption
      • Full disk encryption (FDE)
    • Encrypted LVM
    • Network and firewalls
      • No Open Ports
      • SYN Cookies
      • Firewall
      • nftables
  • Compliance automation
    • Ubuntu Security Guide (USG)
      • Install Ubuntu Security Guide
      • CIS
        • CIS benchmarks and profiles
        • Auditing an Ubuntu system for CIS compliance
        • Applying the CIS rules to the current system
        • Customizing CIS profiles
      • DISA-STIG
        • Auditing an Ubuntu system for DISA-STIG compliance
        • Applying the DISA-STIG rules
        • Customize DISA-STIG profiles
    • FIPS 140 for Ubuntu
      • Overview of FIPS-certified modules
      • Contacts
      • FIPS and Livepatch
      • How to install Ubuntu with FIPS mode enabled
      • How to switch Ubuntu to FIPS mode
      • FIPS mode with full disk encryption
      • How to connect to WiFi in FIPS mode
      • How to troubleshoot and solve common issues
  • Common security mistakes
    • Direct downloading of .debs from the archive
    • Downloading .debs from untrusted sources
Back to top

Network and firewallsΒΆ

  • No Open Ports
  • SYN Cookies
  • Firewall
  • nftables
Next
No Open Ports
Previous
Full disk encryption (FDE)
© 2025 CC-BY-SA, Canonical Ltd.
Last updated on Oct 08, 2025
Contents
  • Network and firewalls