---
type: task
---

The Firewalls doc page should be extra clear that adding the line

```
-A INPUT --source <network CIDR> --jump ACCEPT
```

will not expose the host to the network entirely, as the nebula firewall will
still block all traffic by default.