Firewalld

From DWIKI

Redhat firewall interface

Links

HOWTO

show rules

firewall-cmd --list-all

add service

firewall-cmd --zone=public --add-service=https
firewall-cmd --permanent --zone=public --add-service=https

add allow source to service

TODO

add port

firewall-cmd --zone=public --add-port=5000/tcp
firewall-cmd --permanent --zone=public --add-port=5000/tcp


remove port

firewall-cmd --zone=public --remove-port=2222/tcp 

Rich rules

Show rich rules

firewall-cmd --list-rich-rules

Allow specific source to specific port

firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="1.2.3.4/32" port protocol="tcp" port="4567" accept'


delete rich rule

--delete-rich-rule same as --add-rich-rule


zones

Create zone

firewall-cmd --permanent --new-zone=myzone
  1. really?
firewall-cmd --reload
firewall-cmd --runtime-to-permanent

Add port to zone

https://firewalld.org/documentation/howto/add-a-service.html