Firewalld: Difference between revisions
From DWIKI
m (→HOWTO) |
m (→zones) |
||
| Line 26: | Line 26: | ||
==zones== | ==zones== | ||
*[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-working_with_zones Working with zones] | |||
===Create zone=== | ===Create zone=== | ||
firewall-cmd --permanent --new-zone=myzone | firewall-cmd --permanent --new-zone=myzone | ||
#really? | |||
firewall-cmd --reload | firewall-cmd --reload | ||
firewall-cmd --runtime-to-permanent | |||
===Add port to zone=== | |||
https://firewalld.org/documentation/howto/add-a-service.html | |||
Revision as of 11:53, 29 August 2023
Redhat firewall interface
Links
- https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-firewalld-on-centos-7
- cheatsheet
HOWTO
show rules
firewall-cmd --list-all
add service
firewall-cmd --zone=public --add-service=https firewall-cmd --permanent --zone=public --add-service=https
add port
firewall-cmd --zone=public --add-port=5000/tcp firewall-cmd --permanent --zone=public --add-port=5000/tcp
or
firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="1.2.3.4/32" port protocol="tcp" port="4567" accept'
delete rich rule
--delete-rich-rule same as --add-rich-rule
zones
Create zone
firewall-cmd --permanent --new-zone=myzone
- really?
firewall-cmd --reload firewall-cmd --runtime-to-permanent
Add port to zone
https://firewalld.org/documentation/howto/add-a-service.html
