A firewall decides which network ports on your VPS the outside world can reach. Without one, every service you start — a database, a stray dev server, a debugging tool — is exposed to the entire internet the instant it binds to a public interface. Ubuntu ships with UFW (Uncomplicated Firewall), a friendly front end to …