In this chapter, we looked at two of four different frontends for the netfilter firewall. First, we looked at our trusty old friend, iptables. We saw that even though it's been around forever and still works, it does have some shortcomings. Then, we saw how Ubuntu's uncomplicated firewall can vastly simplify setting up an iptables-based firewall.

In the space that's been allotted for this chapter, I've only been able to present the essentials that you need in order to set up basic host protection. However, this should be enough to get you started. 

In the next chapter, we'll look at nftables and firewalld, the two newest netfilter interfaces. I'll see you there.