UFW Without SSH LockoutStage temporary and interface-specific rules, verify fresh connections, and then remove public SSH safely.