Any thoughts on ufw? I usually disable that and just make sure that I don't have unneeded ports open. I configure iptables manually if needed.