How to set up a hetzner firewall?

Question

Hetzner

Hello, using the Hetznera firewall, I want to make it possible to connect to the server via Tcp port 22 and tcp 25565, and all other ports and protocols were closed and packets were dropped before reaching the server. But at the same time, so that responses can be accepted if the server is the first to request something.
Now I have created 2 entries:
1 allows 22 and 25565 port
2 allows all tcp ports if there are ack|rst flags
But at least apt update still doesn't work, can't connect to servers. What needs to be done so that all responses to requests are accepted?

Answer 1

Well, in general, outgoing ones are allowed by default
Make it just necessary to allow incoming ones, and below them - drop everything else incoming
What's the problem on the server itself, just configure iptables? For such settings, you need a little