ufw

I had a server running fail2ban happily for two years. SSH brute-force IPs were getting banned, the f2b-sshd chain was active, all good. Then I ran ufw enable to add a quick firewall rule for an internal service — and …