Questions tagged [firewalld]

Firewalld is a Fedora project that "provides a dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces".

Filter by
Sorted by
Tagged with
0 votes
0 answers
7 views

Firewalld Internal zone Rejected

I'm trying a simple firewalld setup on ubuntu/jammy64 as follows with Source (K1) ------ (fw int) | Firewall (FW1) | (fw ext) ------ Destination (K2) ┌──(vagrant㉿k1)-[~] └─$ ip -4 a show eth1 3: eth1:...
user avatar
  • 101
0 votes
0 answers
21 views

Firewalld block all input/output connections and only allow some outgoing ports

I am trying to set firewalld in Fedora 36 to block all input and output connections and only allow certain outgoing communication. The computer is not a server of any kind so we want to block all ...
user avatar
0 votes
0 answers
9 views

How to make changes to firewall during a kickstart installation

I am trying to change some of the firewall settings during an automatic kickstart installation in the %post section on a RHEL 8 server. For example: firewall-cmd --permanent --zone=public --set-...
user avatar
  • 309
0 votes
0 answers
34 views

Port forwarding while preserving original IP

Im using firewalld to forward an incoming port from the internet (9999) to a local LAN IP address (100.1.1.1) like this: external (active) target: default icmp-block-inversion: no interfaces: ...
user avatar
  • 121
0 votes
0 answers
37 views

firewalld: forward traffic as a wireguard VPN gateway

I have setup a pi running Pi OS 11 as a VPN gateway for my local network using Wireguard & Nftables, that all works fine. However, I wish to switch over to firewalld to be compatible with docker ...
user avatar
  • 111
1 vote
0 answers
28 views

Change the default firewalld zone for podman networks

Whenever podman creates a new network (interface) - by default - it adds it to the trusted zone of firewalld as described here: Podman adds each container to firewalld's trusted zone. You can add ...
user avatar
1 vote
1 answer
41 views

Cannot make rules permanent in firewalld

I am using firewalld. I want to add a range of source IPs in the trusted zone. I can in fact do this: ❯ sudo firewall-cmd --zone=trusted --add-source=192.168.0.0/16 success And I can confirm that the ...
user avatar
  • 23
0 votes
1 answer
163 views

Convert iptable rules to firewalld

Need your help to convert this to a firewalld command. I'm not sure that i will do it in proper way, so yeah :) -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A ...
user avatar
  • 107
0 votes
0 answers
26 views

Convert iptables rules to firewalld for supporting domain

I have a list of iptables rules (see below). The main idea of rules replace source ip address for each request on a specific destination IP address. These rules work properly, but in my case the ...
user avatar
0 votes
1 answer
69 views

Redirecting traffic for inside network, and allow this from only IP address

I have problem with iptables. In IP tables I make redirect traffic from port 4440 to inside IP Adresses 10.0.10.102:4440 -A PREROUTING -p tcp -m tcp --dport 4440 -j DNAT --to-destination 10.0.10.102:...
user avatar
  • 3
0 votes
0 answers
46 views

How to reset the firewall configuration in a persistent manner?

Internet works, ping 192.168.1.4 which is for sure of an Android device does not. I believe it is an issue of the firewall programs. $ ping 192.168.1.4 PING 192.168.1.4 (192.168.1.4) 56(84) bytes of ...
user avatar
4 votes
1 answer
101 views

firewalld - where are the numeric firewall port numbers mapped to the service name?

# firewall-cmd --permanent --add-service=nfs # filewall-cmd --permanent --add-service=rpc-bind in RHEL/CentOS 7.9 if I do the above, what numeric port numbers are opened in the firewall? Where is the ...
user avatar
  • 4,251
0 votes
0 answers
41 views

firewalld not blocking http and https access

I am running a httpd container on this machine, but http or https aren't enabled on firewalld. But I can still access the website from another machine that is on the same network. Why is this behavior?...
user avatar
-1 votes
1 answer
129 views

INVALID_PORT Error from firewall-cmd

When I try to add a port via firewall-cmd --permanent --add-port=XXXXX/tcp I get the error Error: INVALID_PORT: XXXXX Why?
user avatar
  • 1
0 votes
1 answer
67 views

iptables accept from specific ips slows down SSH and web

I used ranges of IP address to block other countries, when I use SSH or some of my web services it slows down, if I remove the rules and put everything back to normal it works normally, any ideas?
user avatar
0 votes
1 answer
76 views

Firewall is active, added port to iptables but still cannot connect

We have RedHat 8 server. Firewalld is active. I need to connect to port 5050 from my lap top and from the second server, so I added it to the rules iptables -I INPUT -p tcp -m tcp --dport 5050 -j ...
user avatar
  • 188
0 votes
1 answer
93 views

iptables/firewall-cmd DROP rules set last block ip rule set before

As follow is the list of the iptables rules that I have : # firewall-cmd --direct --get-all-rules ipv4 filter INPUT 0 -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT ... ... ipv4 filter INPUT ...
user avatar
  • 1
0 votes
1 answer
24 views

OpenSUSE firewall services map

How are services mapped to ports in firewalld on openSUSE? I would have expected /etc/services. I saw this was recently moved to /usr/etc/services, but that doesn't seem to be the place either. ...
user avatar
0 votes
1 answer
119 views

how to use firewalld in stateful mode

I have to setup an stateful firewall on centos8 using firewalld. I'm new to firewalld but have experience with old style iptables for this purpose. since it is recommended by Redhat here, I prefer to ...
user avatar
2 votes
1 answer
596 views

FirewallD and docker: block a port from being publicly accessible

I am having some issues trying to restrict access to 2 docker containers I am currently running using Centos8 and Firewalld. First of all, the containers have the following configuration: services: ...
user avatar
0 votes
2 answers
124 views

Unable to connect telnet to mysql listen ip port from remote host

I m able to telnet locally to mysql process like below: I have also made sure MySQL process is listening on all IPs by setting bind-address = 0.0.0.0 as evident below: root@localhost:~# netstat -plutn ...
user avatar
  • 307
0 votes
1 answer
118 views

Firewalld show rich rules without zone

May someone could help me with firewalld. I need to add rich rules with no associated zone, as the source / destination networks are all remote. For example: firewall-cmd --add-rich-rule='rule family=&...
user avatar
0 votes
1 answer
361 views

MASQUERADE doesn't work - the response packets are lost

According to tcpdump, the initial packet from the VPN client gets its source address translated and sent to the destination and the response packet arrives, but this response packet is just lost. I ...
user avatar
  • 1,801
0 votes
0 answers
33 views

Ubuntu 20.04, Firewalld: Am able to SSH from outside of Source Address

So I'm going through the setting up local firewalls on linux servers for work. Today I created two new zones: zoneA and zoneB. Zonea has snmp and ssh services added, also has 4 subnets and 1 ip ...
user avatar
  • 53
2 votes
0 answers
70 views

Why I have so many veth interfaces in firewalld Zone

I have a server that runs docker and firewalld, everything works fine but I cannot reload firewalld with the command firewall-cmd --reload One thing that I notice is in the result of this command [...
user avatar
1 vote
0 answers
81 views

If I remove `ssh` from public zone and retain only rich rules in trusted one, will I be able to reach my server?

I have the following (multiple empty entries are omitted): $ sudo firewall-cmd --list-all-zones block target: %%REJECT%% icmp-block-inversion: no masquerade: no dmz target: default icmp-...
user avatar
  • 2,617
1 vote
1 answer
47 views

Firewalld forwarded ports are refusing connection

I have a problem with Firewalld port forwarding. The issue is that forwarded ports are refusing connections or are not responding (TCP flag RSET? on hypervisor where port forwarding is set up) OS: ...
user avatar
  • 31
0 votes
1 answer
55 views

I have added port to firewalld but ECONNREFUSED will return every time I send a request

I'm working on Centos7 VPS and I have added port 9200 to firewalld, but I can not request this port and I will get this error Error: connect ECONNREFUSED from Postman. My firewall status: > ...
user avatar
0 votes
1 answer
250 views

Firewalld: Error: Invalid_Zone

I got some error I can not solve while setting up a default zone in firewalld. I added the interface with firewall-cmd --zone=public --change-interface=ens3 and then I saw the default public zone ...
user avatar
0 votes
0 answers
281 views

gnome shell[31567]: clutter_actor_set_size: assertion 'CLUTTER_IS_ACTOR (self)' failed [duplicate]

Trying to start firewalld but getting this gnome error. I restarted gnome and gnome is active. i am using CentOS7. I searched Google but wasn't much on this error. gnome shell[31567]: ...
user avatar
0 votes
0 answers
26 views

Firewalld: Services Not Being Added

I tried adding services http, https, smtp, imap, imaps to firewalld but they are not showing when I firewall-cmd --get-services I only see ssh on port 22 which needs to be changed to a different port. ...
user avatar
0 votes
1 answer
1k views

Debian systemd firewall or firewalld?

I have run into some issues with the Firewall configuration for Debian 10 Buster: [agp@debian10 ~]$ systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: ...
user avatar
  • 41
0 votes
0 answers
30 views

How to add destination ip to a zone in firewalld in ubuntu

I have a server that has two IPs connected to ens3. I want to set up the firewalld the way that each one of these addresses have their own rules. how can I make this to work? I've already tried this ...
user avatar
0 votes
1 answer
312 views

CentOS 8: Which repo has the latest version of FirewallD?

I am running a CentOS 8.4 server with the following repos: ~]$ dnf repolist repo id repo name appstream CentOS Linux 8 - AppStream baseos CentOS Linux 8 - BaseOS epel ...
user avatar
0 votes
1 answer
304 views

fail2ban / FirewallD error: invalid port/service `1-65535' specified

I am running a CentOS 8.4 server. When I do a systemctl status firewalld I see the daemon is active and running, but I see the following error repeated five times: ERROR: '/usr/sbin/iptables-restore -...
user avatar
1 vote
0 answers
139 views

How to logging IP address with firewalld SNAT?

I try to setting up SNAT with firewalld on my CentOS 8 PC to make NAT router like below. Users access to the Web Server via CentOS8. [UserPC]---(192.168.0.0/24)---[CentOS 8]---(10.0.0.0/24)---[Web ...
user avatar
  • 11
0 votes
0 answers
60 views

Limited connectivity through Hotspot

Fedora 31. I am successfully connected to Internet through mobile broadband, and I've created a hotspot over wifi and connected from (Android) phone to that. However I can't reach Internet from the ...
user avatar
0 votes
1 answer
39 views

Open ports for an interface without adding the interface to a zone?

I am using CentOS 8 and the firewall it comes with. I would like to open a port for my VPN interface (tun0). Is it possible to do this without adding the interface to a zone and then open the port for ...
user avatar
1 vote
1 answer
675 views

How to block outbound traffic in CentOS without using IPTables or Firewalld?

I am trying to implement something like Chaos engineering, so implementing the functionalities manually. One of the functionality is blocking outbound DNS traffic without using IPTables or firewalld. ...
user avatar
  • 5,311
-1 votes
1 answer
23 views

Reject IP that is already in white list

Time ago I set firewall-cmd --permanent --zone=public --add-source=170.8.0.0/18 Today I ran firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='170.8.1.1' reject"; ...
user avatar
  • 189
0 votes
1 answer
144 views

firewalld port forwarding breaks outbound traffic on that port

I'm using a Linux computer as a gateway/firewall between the wider network and a few servers. WAN -> [ 192.x | GATEWAY (Linux) | 10.x ] -> [ 10.0.0.100 | SERVER (Linux) ] This configuration ...
user avatar
0 votes
1 answer
146 views

firewalld: Significance of the number after INPUT/OUTPUT

firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -p tcp -m tcp --dport=80 -j ACCEPT What does the 0 after OUTPUT mean or what is the significance of any number after INPUT/OUTPUT? I ...
user avatar
0 votes
1 answer
180 views

Bash Script fails to remove list of services from Firewalld

I am attempting to clear out all existing services configured in firewalld via a bash script. # produces {cockpit,dhcpv6-client,ssh} as an example local EXISTING_SERVICES="{$(firewall-cmd --...
user avatar
  • 452
0 votes
1 answer
376 views

Why does firewalld enabled after a reboot and after a restart have a different behavior?

I'm on Centos 8 Stream, a rolling release version using 4.18.0-301.1.el8.x86_64 and I find weird and non consistent behavior. Depending on how firewalld is started, it has a different behavior. When ...
user avatar
  • 452
0 votes
0 answers
32 views

Why am I unable to run UFW?

A few weeks ago, out of curiosity, I disabled ufw and started using firewalld. I want to start using ufw again, but as you can see in the screenshot, systemctl status ufw outputs "active (exited)&...
user avatar
0 votes
0 answers
235 views

Prevent IP forwarding with firewalld

I may have misunderstood something here, but I expected to be able to block packet forwarding using firewalld, but it seems to only deal with the INPUT and OUTPUT chains, not the FORWARD chain. Is ...
user avatar
1 vote
0 answers
465 views

Docker inter-container communication with firewalld

I'm trying to install ansible awx 17.1.0 on a Fedora 33 Server. The install process creates a few docker containers which need to communicate with each other. With firewalld enabled, this does not ...
user avatar
  • 1,582
0 votes
1 answer
186 views

Get netfilter statistics on the command line

I am finally switching from the old iptables to the new netfilter (specifically using firewalld) to configure my computers and servers but so far I have failed to find any newer alternative to the ...
user avatar
  • 103
1 vote
1 answer
970 views

Can't use virt-manager after removing firewalld

I accidentally ran a sudo apt remove firewalld, and now trying to use virt-manager to create a virtual machine shows the following message: The name org.fedoraproject.FirewallD1 was not provided by ...
user avatar
1 vote
0 answers
405 views

UPnP with firewalld

This question is probably related to: Fedora firewall with UPnP? Because newer fedora workstations use firewalld, it's a bit of a different situation. The problem I'm experiencing is that I can't ...
user avatar
  • 1,582

1
2 3 4 5 6