## UFW (firewall) excerpt
Status: active
Default: deny (incoming), allow (outgoing)

Allowed (examples):
- 22/tcp (SSH)
- 80/tcp (HTTP)
- 443/tcp (HTTPS)
- 51820/udp (WireGuard)

# Notes: Demonstrates a default-deny incoming policy with explicit allows for web, ssh and VPN.