Firewalld - Revision history

Tony: /* delete rich rule */

2026-05-15T11:11:26Z

delete rich rule

← Older revision		Revision as of 11:11, 15 May 2026
Line 36:		Line 36:

	===delete rich rule===		===delete rich rule===
			Get a list of current rules:
			firewall-cmd --list-all-zones
			and then
	--delete-rich-rule same as --add-rich-rule		--delete-rich-rule same as --add-rich-rule


	==zones==		==zones==

2024-07-03T11:43:26Z

HOWTO

← Older revision		Revision as of 11:43, 3 July 2024
Line 21:		Line 21:
	firewall-cmd --permanent --zone=public --add-port=5000/tcp		firewall-cmd --permanent --zone=public --add-port=5000/tcp

	or
			==remove port==
			firewall-cmd --zone=public --remove-port=2222/tcp

2024-01-29T15:48:14Z

HOWTO

← Older revision		Revision as of 15:48, 29 January 2024
Line 22:		Line 22:

	or		or


			==Rich rules==
			===Show rich rules===
			firewall-cmd --list-rich-rules

			===Allow specific source to specific port===
	firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="1.2.3.4/32" port protocol="tcp" port="4567" accept'		firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="1.2.3.4/32" port protocol="tcp" port="4567" accept'


	==delete rich rule==
			===delete rich rule===
	--delete-rich-rule same as --add-rich-rule		--delete-rich-rule same as --add-rich-rule

2024-01-25T14:36:46Z

add allow source to service

← Older revision		Revision as of 14:36, 25 January 2024
Line 15:		Line 15:

	==add allow source to service==		==add allow source to service==
	~~firewall-cmd --service=ssh --add-source=1.2.3.4~~		TODO

	==add port==		==add port==

2024-01-25T14:31:25Z

← Older revision		Revision as of 14:31, 25 January 2024
Line 13:		Line 13:
	firewall-cmd --zone=public --add-service=https		firewall-cmd --zone=public --add-service=https
	firewall-cmd --permanent --zone=public --add-service=https		firewall-cmd --permanent --zone=public --add-service=https

			==add allow source to service==
			firewall-cmd --service=ssh --add-source=1.2.3.4

	==add port==		==add port==

2023-08-29T10:54:06Z

Links

← Older revision		Revision as of 10:54, 29 August 2023
Line 2:		Line 2:

	=Links=		=Links=
			*[https://firewalld.org/documentation/howto/ Firewalld howto]
	*https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-firewalld-on-centos-7		*https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-firewalld-on-centos-7
	*[https://www.liquidweb.com/kb/an-introduction-to-firewalld/ cheatsheet]		*[https://www.liquidweb.com/kb/an-introduction-to-firewalld/ cheatsheet]

2023-08-29T10:53:23Z

zones

← Older revision		Revision as of 10:53, 29 August 2023
Line 26:		Line 26:

	==zones==		==zones==
			*[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-working_with_zones Working with zones]

	===Create zone===		===Create zone===
	firewall-cmd --permanent --new-zone=myzone		firewall-cmd --permanent --new-zone=myzone
			#really?
	firewall-cmd --reload		firewall-cmd --reload
			firewall-cmd --runtime-to-permanent

			===Add port to zone===
			https://firewalld.org/documentation/howto/add-a-service.html

2023-08-29T10:47:38Z

HOWTO

← Older revision		Revision as of 10:47, 29 August 2023
Line 23:		Line 23:
	==delete rich rule==		==delete rich rule==
	--delete-rich-rule same as --add-rich-rule		--delete-rich-rule same as --add-rich-rule


			==zones==
			===Create zone===
			firewall-cmd --permanent --new-zone=myzone
			firewall-cmd --reload

2023-04-21T09:01:08Z

HOWTO

← Older revision		Revision as of 09:01, 21 April 2023
Line 19:		Line 19:
	or		or
	firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="1.2.3.4/32" port protocol="tcp" port="4567" accept'		firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="1.2.3.4/32" port protocol="tcp" port="4567" accept'


			==delete rich rule==
			--delete-rich-rule same as --add-rich-rule

2023-02-23T09:51:55Z

← Older revision		Revision as of 09:51, 23 February 2023
Line 5:		Line 5:
	*[https://www.liquidweb.com/kb/an-introduction-to-firewalld/ cheatsheet]		*[https://www.liquidweb.com/kb/an-introduction-to-firewalld/ cheatsheet]

	=~~FAQ~~=		=HOWTO=
			==show rules==
			firewall-cmd --list-all

	==add service==		==add service==