At this point, could we just drop all inbound traffic on all ports (i.e. no need to specify `--dport ssh`)?