The Red Hat firewall - Revision history

George2 at 15:34, 24 October 2018

2018-10-24T15:34:12Z

2018-10-24T15:33:36Z

2016-05-25T13:31:23Z

2016-05-12T15:07:35Z

2016-05-12T11:03:48Z

2016-05-12T11:03:03Z

2016-05-12T10:57:03Z

2016-05-12T10:54:51Z

2016-05-12T10:54:38Z

2016-05-12T10:54:05Z

@@ Line 5: / Line 5: @@
 firewall-cmd --add-rich-rule 'rule family="ipv4" service name="ssh" source address="158.143.100.0/22" accept'
-</source>firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4"  source address="158.143.100.0/22"   port protocol="tcp" port="22" accept '
+</source>
 firewall-cmd --reload

@@ Line 1: / Line 1: @@
 less /etc/sysconfig/system-config-firewall<br>
 The configuration for firewalld is stored in various XML files in /usr/lib/firewalld/ and /etc/firewalld/. This allows a great deal of flexibility as the files can be edited, written to, backed up, used as templates for other installations and so on.<br>
@@ Line 7: / Line 19: @@
   service firewalld start
   systemctl disable firewalld
-  systemctl enable firewalld
+  systemctl enable firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4"  source address="158.143.100.0/22"   port protocol="tcp" port="22" accept '
   firewall-cmd
   firewall-cmd status

@@ Line 2: / Line 2: @@
 The configuration for firewalld is stored in various XML files in /usr/lib/firewalld/ and /etc/firewalld/. This allows a great deal of flexibility as the files can be edited, written to, backed up, used as templates for other installations and so on.<br>
 systemctl status firewalld<br>
   iptables-save
   service firewalld stop
@@ Line 8: / Line 9: @@
   systemctl enable firewalld
   firewall-cmd
 Reference - https://www.certdepot.net/rhel7-get-started-firewalld/
   firewall-cmd --permanent --zone=trusted --add-source=192.168.2.0/24

← Older revision		Revision as of 15:07, 12 May 2016
Line 24:		Line 24:
	Check the zone file later to inspect the XML configuration<br>		Check the zone file later to inspect the XML configuration<br>
	cat /etc/firewalld/zones/public.xml<br>		cat /etc/firewalld/zones/public.xml<br>
		+	<br>
		+	Reference - https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Security_Guide/sec-Using_Firewalls.html

← Older revision		Revision as of 11:03, 12 May 2016
Line 22:		Line 22:
	source address="1.2.3.4/32" \		source address="1.2.3.4/32" \
	port protocol="tcp" port="4567" accept"		port protocol="tcp" port="4567" accept"
		+	Check the zone file later to inspect the XML configuration<br>
		+	cat /etc/firewalld/zones/public.xml<br>

← Older revision		Revision as of 11:03, 12 May 2016
Line 18:		Line 18:
	firewall-cmd --zone=public --remove-service=ssh --permanent		firewall-cmd --zone=public --remove-service=ssh --permanent
	firewall-cmd --reload		firewall-cmd --reload
		+	'''Rich rules'''
		+	firewall-cmd --permanent --zone=public --add-rich-rule="rule family="ipv4" \
		+	source address="1.2.3.4/32" \
		+	port protocol="tcp" port="4567" accept"

← Older revision		Revision as of 10:57, 12 May 2016
Line 13:		Line 13:
	firewall-cmd --zone=trusted --list-sources		firewall-cmd --zone=trusted --list-sources
	Note: Add the –permanent option if you only want to display permanent settings.		Note: Add the –permanent option if you only want to display permanent settings.
		+	'''Example'''
		+	firewall-cmd --zone=internal --add-service=ssh --permanent
		+	firewall-cmd --zone=internal --add-source=1.2.3.4/32 --permanent
		+	firewall-cmd --zone=public --remove-service=ssh --permanent
		+	firewall-cmd --reload

@@ Line 12: / Line 12: @@
   firewall-cmd --reload
   firewall-cmd --zone=trusted --list-sources
-Note: Add the –permanent option if you only want to display permanent settings.
+ Note: Add the –permanent option if you only want to display permanent settings.

← Older revision		Revision as of 10:54, 12 May 2016
Line 12:		Line 12:
	firewall-cmd --reload		firewall-cmd --reload
	firewall-cmd --zone=trusted --list-sources		firewall-cmd --zone=trusted --list-sources
		+	Note: Add the –permanent option if you only want to display permanent settings.

← Older revision		Revision as of 10:54, 12 May 2016
Line 11:		Line 11:
	firewall-cmd --permanent --zone=trusted --add-source=192.168.2.0/24		firewall-cmd --permanent --zone=trusted --add-source=192.168.2.0/24
	firewall-cmd --reload		firewall-cmd --reload
		+	firewall-cmd --zone=trusted --list-sources