# Managed by sicherheit-install
*filter
:ufw-after-input - [0:0]
:ufw-after-output - [0:0]
:ufw-after-forward - [0:0]

# Drop invalid packets early
-A ufw-after-input -m conntrack --ctstate INVALID -j DROP

COMMIT