This is an old revision of the document!
Default Deny for all incoming traffic
DNS-based filtering
Network segmentation
Install Fail2Ban