Quick, now lean a firewall with a good IDS

and fail2ban

It is, in fact, the only Snap I’ve ever used which worked without issues

That being said, it’s kinda slow in some cases, but perfectly useable nonetheless