isle/tasks/docs/clarify-firewalls.md

257 B

type
task

The Firewalls doc page should be extra clear that adding the line

-A INPUT --source <network CIDR> --jump ACCEPT

will not expose the host to the network entirely, as the nebula firewall will still block all traffic by default.