In this chapter, we looked at the latest in Linux firewall technology, nftables. Then, we looked at firewalld, which used to be specific to Red Hat-type distros, but is now also available in Ubuntu repositories.

In the space that I've been allotted, I've presented the basics of using these technologies to set up single-host protection. I've also presented some details about the innards of firewalld that you won't find documented anywhere else, including in the official Red Hat documentation.

In the next chapter, we'll look at the various encryption technologies that can help keep your data private. I'll see you there.