Earlier quoted context omitted.
Just install ufw. It's very simple to configure the rules for a basic server. Here's how: https://www.digitalocean.com/community/articles/how-to-setup...
Why would you use that over iptables? It's simple and doesn't require installing a package. > There is a lot of functionality built into these > utilities, iptables being the most popular nowadays, but > they require a decent effort on behalf of the user to > learn and understand them. Is that a corner worth cutting?
Simple is being able to simply say "allow all outgoing traffic and incoming traffic should only be allowed for HTTP(S) and SSH" and being able to figure out how to do it by just invoking "ufw --help".
Maybe someday I'll learn about iptables, I'm sure it's going to be worth it, but for now ufw does the job for me.