diff --git a/blog/initial-server-setup.html b/blog/initial-server-setup.html
index d98b703..32522f1 100644
--- a/blog/initial-server-setup.html
+++ b/blog/initial-server-setup.html
@@ -40,7 +40,7 @@
 				<h2>Update the OS</h2>
 				<p>Even with a fresh install of Debian from the latest ISO, there may be some updates you're missing, and it's a good idea to have these, especially in case they're security updates.</p>
 
-				<pre><code>apt update && apt upgrade</code></pre>
+				<pre><code>apt update &amp;&amp; apt upgrade</code></pre>
 
 				<h2>Install essential packages</h2>
 				<p>These are packages that are needed for accessing, and controlling the server</p>
@@ -84,14 +84,16 @@ usermod -aG sudo $USERNAME$</code></pre>
 				<p>We'll install ufw, deny access inwards to all ports, but allow our server to access any ports outwards. We will then manually allow inwards traffic to the SSH port we set, in this case 2020</p>
 
 				<pre><code>apt install ufw</code></pre>
-<pre><code>ufw deny incoming &&
-ufw allow outgoing &&
-ufw allow 2020 &&
+<pre><code>ufw default deny incoming &amp;&amp;
+ufw default allow outgoing &amp;&amp;
+ufw default allow 2020 &amp;&amp;
 ufw enable</code></pre>
 				<p>If there are any other ports that need to be opened in the future this can be done with:</p>
-				<pre><code>ufw allow <PORT></code></pre>
+				<pre><code>ufw allow $PORT</code></pre>
 				<p>or</p>
-				<pre><code>sudo ufw allow <PORT></code></pre>
+				<pre><code>sudo ufw allow $PORT</code></pre>
+				<p>Then enable it, <strong>making sure you've allowed ssh first</strong></p>
+				<pre><code>sudo ufw enable</code></pre>
 
 				<h2>Set hostname</h2>
 				<p>Setting the name for a server is an important step, but the name doesn't need to be serious</p>