Firewall SSH guard
The Firewall app actively prevents the most common self-inflicted outage: locking yourself out of SSH.
The guard
- Enabling UFW auto-allows the SSH port first.
- Any rule that could block SSH — a deny/reject on the SSH port, a blanket deny, or deleting the active SSH-allow rule — is refused with a confirm prompt.
- Every firewall action is audited.
Tip
This makes UFW safe to manage from the browser even on a remote box where a mistake would otherwise cut your only way back in.