Try to use a firewall outside the server if possible. You can easily mess up the firewall configuration on Linux. Or your users can. For example Docker will ig

Try to use a firewall outside the server if possible. You can easily mess up the firewall configuration on Linux. Or your users can. For example Docker will ignore the firewall by default when you expose ports.