I still don’t understand why this is necessary. How to block “extra” traffic with built-in tools is well done here - How to really block invalid ICMP, TCP, UDP packets and others + this. And no additional resources are needed for Debian and Python projects running on it. Unless you want to watch beautiful and useless graphics. As I wrote above, if you need to show the management beautiful diagrams of how all sorts of bad people are trying to “hack” you - install TEMPORARY T-Pot. Show pictures and delete it. Other than that, it’s a waste of resources.