nft

nftables firewall (modern iptables successor).

$ sudo nft list ruleset
$ sudo nft add table inet filter
$ sudo nft 'add chain inet filter input { type filter hook input priority 0; }'
$ sudo nft add rule inet filter input tcp dport 22 accept