# UFW — snapshot 2026-06-25 (serveur 51.158.96.239)

## Statut
Status: active   |   enabled + active au boot
Logging: on (low)
Default: deny (incoming), allow (outgoing), disabled (routed)

## Règles ouvertes
[1] OpenSSH      22/tcp        ALLOW IN  Anywhere (v4+v6)
[2] Apache Full  80,443/tcp    ALLOW IN  Anywhere (v4+v6)

## /etc/default/ufw
IPV6=yes
DEFAULT_INPUT_POLICY="DROP"
DEFAULT_OUTPUT_POLICY="ACCEPT"
DEFAULT_FORWARD_POLICY="DROP"
DEFAULT_APPLICATION_POLICY="SKIP"
MANAGE_BUILTINS=no

## Remarque
- Port 22 ouvert sans rate-limit (`ufw limit` non utilisé). SSH password auth = no
  (clé only), donc risque brute-force SSH faible mais limit recommandé en defense-in-depth.