When do you use this vs. seperate firewall like ufw for blocking IPs? Or both for good measure?