Firewall hardening

[qubist]

Hi,

I am working on a hardened firewall based on this skeleton:

https://web.archive.org/web/20230609174411/https://blog.samuel.domains/blog/security/nftables-hardening-rules-and-good-practices

I am also thinking to combine it with something like the synproxy example from nftables wiki:

https://wiki.nftables.org/wiki-nftables/index.php/Synproxy

Has anything like that been considered for Qubes OS before?
Or would it be good to integrate such approach? (at least the ingress and prerouting parts)