sudo pacman -S ufw (installs the ufw package)

sudo systemctl start ufw (starts ufw service)

sudo systemctl enabe ufw (starts ufw service by default at boot)

ufw default deny (denies all by default)

ufw allow from 192.168.0.0/24 (allows access from a local LAN network)

https://wiki.archlinux.org/title/Uncomplicated_Firewall