ufw

“Uncomplicated Firewall” (Ubuntu front-end to iptables / nftables).

$ sudo ufw status verbose
$ sudo ufw allow 22/tcp
$ sudo ufw allow from 10.0.0.0/8 to any port 5432
$ sudo ufw deny 23/tcp
$ sudo ufw enable
$ sudo ufw disable