Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewalld]

Firewalld is a Fedora project that "provides a dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces".

0
votes
1answer
32 views

Firewalld: block outgoing connections on specific port

I want to add a rule to firewalld in order to block any outgoing connections/traffic on port 9000 and leave the rest unchanged. How to to that with firewall-cmd command? Thanks.
0
votes
0answers
39 views

How to migrate iptables rules to firewalld?

I need to migrate this iptables rules to firewalld but I don't know how to do it. The rules to migrate are: *nat :PREROUTING ACCEPT [5322227:529801781] :POSTROUTING ACCEPT [848032:...
0
votes
1answer
71 views

Port forward from external postgresql to localhost

I have several databases hosted outside the application server, ex: DB instances: 192.168.178.21:5432 192.168.178.22:5432 192.168.178.23:5432 app-server: 192.168.178.11 now I want to forward the ...
0
votes
0answers
18 views

Does the `drop` zone (and the `block` zone) allow all ICMP packets?

$ rpm -q firewalld firewalld-0.6.3-1.fc29.noarch $ cd /usr/lib/firewalld/zones/ $ cat drop.xml <?xml version="1.0" encoding="utf-8"?> <zone target="DROP"> <short>Drop</short> ...
0
votes
1answer
26 views

Using firewalld on a gateway certain websites are not accessible over HTTPS

I'm building a firewall / gateway on a raspberry PI (Debian 9) I'm using firewalld to create firewall rules. So far, most sites and services are working fine. However there are a few sites that are ...
1
vote
2answers
146 views

firewall-cmd says no firewall zones are active. Why?

On Debian 9, I installed firewalld (version 0.4.4.2-1). sudo firewall-cmd --get-active-zones shows no output. And echo $? shows the exit status was 0 (EXIT_SUCCESS). Why? I have a network ...
0
votes
1answer
135 views

Ports not really open after firewalld command

OS: CentOS 7 This is a question that is bordering on two issues. I have a docker machine running where I recently installed the PLEX container from linuxserver/plex. The current problem is that I ...
2
votes
1answer
108 views

firewalld to allow routing without NAT between NICs

As a network adminstrator, I often have to set up network gear for remote sites before shipping it. I have found it convenient to use a linux workstation with two network cards, setting the secondary ...
2
votes
1answer
82 views

What does ebtables.service do?

On Fedora, the firewalld package requires ebtables. Installing firewalld on Debian also installs ebtables by default, although it is a recommendation and not a hard requirement. Fedora does not ...
0
votes
1answer
43 views

I can't see the iptables rules where firewalld enables helpers. Why? Have the helpers been disabled somehow?

Here is an example of the ftp helper added by enabling the ftp service in the public zone: # iptables -t raw -S | grep CT -A PRE_public_allow -p tcp -m tcp --dport 21 -j CT --helper ftp https://...
0
votes
0answers
17 views

Is it possible to disable a “helper” in firewalld?

Is it possible to disable a "helper" in firewalld? Background information: the "helpers" are the conntrack modules which parse an individual application protocol. The classic example is for FTP, ...
0
votes
2answers
25 views

Tighten existing firewalld rules

I have a current ruleset: net1 (active) target: default icmp-block-inversion: no interfaces: ens192 sources: services: http https smtp smtp-submission pop3 pop3s imap imaps ssh ports: ...
-1
votes
1answer
17 views

How to open some port for only OpenVNP clients?

I have a web service on an external server, and an openvpn server on the same machine. I need to open port 80, but only for openvpn clients. In other words, if I do nmap-p 80 server_ip I expect to ...
0
votes
1answer
42 views

Firewalld %%REJECT%%

I'm trying to configure firewalld (v0.4.4.2) on Debian 9 to REJECT invalid requests originating from an internal network. However, if I set the default target of the zone in question to REJECT, the ...
0
votes
1answer
42 views

How do I get a list of the ports which belong to preconfigured firewall-cmd services?

I want to open the following ports in my CentOS 7 firewall: UDP 137 (NetBIOS Name Service) UDP 138 (NetBIOS Datagram Service) TCP 139 (NetBIOS Session Service) TCP 445 (SMB) I can guess that the ...
-2
votes
1answer
188 views

How to block a program from accessing the Internet on Centos [closed]

I want to block a program from using internet. I don't want this program to use internet. How can I do that.
0
votes
1answer
68 views

Allow NetBIOS lookup with firewalld

I just upgraded OpenSUSE from Leap 42.3 to Leap 15.0, and with this upgrade, OpenSUSE moved its default firewall application from SuSEfirewall2 to Firewalld. I opted not to use the susefirewall2-to-...
0
votes
0answers
61 views

Performance of active port - netstat

Below command [root@machine1 output]# netstat -s --udp IcmpMsg: InType0: 371137 InType3: 296 InType8: 386843 InType11: 4 InType13: 141 InType15:...
0
votes
1answer
161 views

Firewalld and iptables priority

Simple question: What is the priority if we have both firewalld and iptables in use? Which takes the priority in the rules. For example, if I block ICMP with firewalld and with iptables I accept it, ...
0
votes
1answer
33 views

firewall-cmd do you have to add port when adding a service?

Will adding a service with firewall-cmd automatically adds the port that a service needs? for example, when I add myservice, do I need to specify a port also? What is the purpose of --add-service if ...
2
votes
1answer
63 views

Source-MAC Filter iptables

I have a HAProxy box with centos7 and doing load balance proxy for a smtp cluster providing mail relay to our customers. default gateway => 10.0.0.1 master-relay.example.net => 10.0.0.254 ...
1
vote
0answers
103 views

How to make ssh port 22 not visible (using firewalld)

I have a virtual machine out on the Internet running Fedora 27 and it gets pounded regularly on port 22 with bots attempting to log in. I have disabled root logins to my machine but I'm tired of my ...
0
votes
1answer
71 views

Name or service not known in DHCP subnet [closed]

I'm trying to setup proper ip forwarding within a DHCP subnet generated through a host with two different netowrk adapters. My current situation is the following: First node with two networks ...
1
vote
1answer
294 views

How can I configure firewalld to share a single interface with multiple zones?

CentOS 7 I have two zones (home and public). I'd like to allow SSH from my home but not from public. [root@foobox ~]# firewall-cmd --list-all --zone=home home (active) target: default icmp-...
1
vote
2answers
147 views

Use the LANs of one server to access the LAN of another

I'm a bit lost here, so I'm asking for your help. =D I have three servers: 1# - LANs A and B 2# - LANs B and C 3# - LANs C and D How can I make server 1# access through LAN B an ip that is in LAN D ...
1
vote
0answers
23 views

restrict one port to a subnet but allow all others

I'm using Firewalld. In general I'd like to leave the computer open for the other services I use, but I've one web server that I'd like to restrict to a subnet. I can find plenty on opening one port ...
0
votes
2answers
42 views

Using FirewallD as SOCKS server

On CentOS 7, can the FirewallD service be used as a SOCKS server? i.e. if I connect ISP line to server's port #1 and LAN to port #2? Using Squid allows LAN clients to browse only, but other things ...
2
votes
1answer
3k views

Firewalld - restrict traffic to specific IPs

I'm trying to setup firewalld to restrict access to the CentOS7 server to specific IPs (192.168.10.5 and 167.165.100.22) both for incoming and outgoing traffic. I have only one network interface, ...
1
vote
3answers
184 views

How to schedule activation/termination of KVM/QEMU virtual mahines?

I run an IPv4 server in a Fedora virtual machine. This server hosts a git service for a group of developers and is open to the internet. As a consequence, it is confronted to hacking attempts (mainly ...
1
vote
0answers
27 views

How to forward traffic comming to NON listening port to another listening port using firewalld?

I have server which does NOT listen on port 514. I need forwarding in this way: request to public_IP:514 ---> redirect to --> localhost:5514 How can I do it using firewalld?
0
votes
1answer
523 views

change source address of outgoing traffic on specific ports

I would like to be able to change the source address of all traffic that is going outbound from my linux server on ports 53 (DNS), 67 & 68 (DHCP) I tried with iptables/firewalld: firewall-cmd --...
0
votes
2answers
508 views

FirewallD Drops Docker Packets

[SOLVED] -- See update below. I installed outline-server (link) on my server and unfortunately FirewallD drops all packets coming from outline-client. My System: Ubuntu 18.04 x64 Linux x 4.15.0-20-...
1
vote
1answer
708 views

Which ports does the default firewall allow on Fedora Workstation and Fedora Server?

What incoming TCP and UDP connections are permitted, by the default firewall policy of Fedora Workstation, and Fedora Server? I am interested in the current version, Fedora 28.
0
votes
0answers
352 views

Why systemctl reload firewalld on centos7 is not working?

Running the following commands on CentOS7 #systemctl start firewalld #systemctl enable firewalld #systemctl reload firewalld #systemctl status firewalld gives output as follows: ...Active:inactive(...
0
votes
0answers
56 views

Webrtc app only works when firewall is disabled

I have a video conference app build using webrtc. I also have TURN server functioning well. (I am using coturn) I have opened all ports required by the app on firewall. Openvidu deployment ...
3
votes
1answer
1k views

How can i allow traffic coming at specific Port in IPtables Rules

I have centos7 running in 2 VM's. firewall is running on both VM machines. Suppose some application is running on machine A which is using 5044 port. and i have another machine called machine B who ...
1
vote
0answers
36 views

Get notified if a specific port accessed? or on outgoing connections?

i am using centos minimal install. Is it possible to get a desktop message on a specific firewall rule ? For example: Get desktop message if a specific port accessed or if a new outgoing connection ...
0
votes
1answer
2k views

Firewalld — interface not adding to zone

I have a peervpn interface "tap0" which I am wanting to accept all traffic from. Box is CentOS 7. My understanding is that I just need to add the interface to the "Trusted" zone. When I try this ...
0
votes
1answer
2k views

URL Filtering with IP tables

I've been trying to set up URL filtering with Iptables. I have set up two interfaces. Traffic flows in from one interface and flows out from the other. Below are the Iptables I have configured: *...
0
votes
0answers
84 views

firewalld still having trouble with stops and starts

My previous adventures with firewalld: CentOS 7: Firewalld ignores its configuration files firewalld zone settings don't survive a reboot Well, firewalld is still being weird across stops and starts....
1
vote
1answer
1k views

Linux ports are blocked even when firewalld is disabled!

RHEL 7.4 I disabled the firewalld and also checked that SELINUX is disabled. But still when I use telnet to check the ports, port 3307 refused the connection. Even port 80 rejects the connection. ...
0
votes
1answer
607 views

firewalld failed to apply rules / set_rule() failure when --reload

I have been using firewalld without any problems for about a year now. Recently I added a new zone docker, to which I added the virual docker0 interface, and added services to that zone, and that zone ...
1
vote
1answer
458 views

How do I whitelist an ip for a limited time?

I'm trying to create auto-whitelisting of IPs with a timeout based on certain events using firewalld and ipsets. This is how far I got firewall-cmd --permanent --new-ipset=whitelist --type=hash:ip --...
0
votes
1answer
213 views

Block all IPs for SSH/SSHD with iptables/fail2ban or firewalld?

I'm trying to learn Linux and get familiar with it. How do I block all IPs except two certain IPs on different subnets for SSH/SSHD? I've been trying to Google for an answer but nothing seem to work ...
0
votes
1answer
2k views

Firewalld : Blacklist certain port to an IP Range

The particular server in question is running CentOS 7 and provides services on the following ports, Port 22 (SSH) and Port Range 11224-12224 (Mostly reverse ssh tunnel). The server is reachable from ...
1
vote
0answers
178 views

Set up firewalld on CentOS before starting it

If we use firewall-cmd to open a port before starting the firewalld service, it will fail saying "firewalld is not running". If I start firewalld I'm getting disconnected from the remote server, I'm ...
2
votes
2answers
180 views

Expose public ports only to the sshed user

We have a VPS running on AWS, although generic solution is expected regardless of hosting vendor. This VPS is acting as a Jump Box (running CentOS 6) for various other internal server such as SSH ...
-2
votes
1answer
2k views

Setting the default zone to trusted with firewall-cmd [closed]

What is the meaning of the --set-default-zone=trusted? firewall-cmd --set-default-zone=trusted and in which cases need to use --set-default-zone=trusted?
0
votes
1answer
787 views

To block outgoing connections from redhat 7 using firewall-cmd

Is there a way to block all outgoing connections from redhat 7 using firewall-cmd or iptables except for one IP. It will make connections to specific IP while drop all connections to the rest. I know ...
2
votes
1answer
3k views

Firewalld: How to whitelist just two IP-addresses, not on the same subnet

I'm running firwalld on a VPS / webserver. The public zone is active and default (and I do not want the change that). How do I allow only these two external IP-addresses to access the VPS (i.e. all ...