Questions tagged [firewalld]
Firewalld is a Fedora project that "provides a dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces".
20
questions
44
votes
9
answers
269k
views
Whitelist source IP addresses in CentOS 7
I want to set up CentOS 7 firewall such that, all the incoming requests will be blocked except from the originating IP addresses that I whitelist. And for the Whitelist IP addresses all the ports ...
16
votes
1
answer
44k
views
Configuring OpenVPN to use Firewalld instead of iptables on Centos 7
I need to configure OpenVPN on Centos 7 using firewalld.
I used iptables on Centos 6.5 and only had to add the following lines to /etc/sysconfig/iptables:
-A POSTROUTING -s "10.0.0.0/24" -o "wlan0"...
- 459
3
votes
2
answers
6k
views
Fedora firewall with UPnP?
I'm using Fedora 15 and Transmission BT client. Transmission can't open ports unless the firewall is disabled.
I searched some posts that said add 1900 to the trusted ports, or via a iptable rule: -...
- 6,651
50
votes
7
answers
122k
views
How to configure Centos 7 firewallD to allow docker containers free access to the host's network ports?
I have docker installed on CentOS 7 and I am running firewallD.
From inside my container, going to the host (default 172.17.42.1)
With firewall on
container# nc -v 172.17.42.1 4243
nc: connect to ...
- 1,359
5
votes
3
answers
29k
views
how to make firewall changes permanent via firewall-cmd?
I am trying to open some ports in CentOS 7.
I am able to open a port with the following command:
firewall-cmd --direct --add-rule ipv4 filter IN_public_allow 0 -m tcp -p tcp --dport 7199 -j ACCEPT
...
- 890
5
votes
2
answers
17k
views
Is firewalld the same as iptables?
I tried to close iptables on RHEL 7.2 using
chkconfig iptables off
error reading information on
service iptables: No such file or directory
tried /etc/init.d/iptables stop too, got
-bash: /...
- 487
4
votes
1
answer
4k
views
Which ports does the default firewall allow on Fedora Workstation and Fedora Server?
What incoming TCP and UDP connections are permitted, by the default firewall policy of Fedora Workstation, and Fedora Server?
I am interested in the current version, Fedora 28.
- 50.3k
2
votes
1
answer
9k
views
How to make modprobe nf_conntrack_ftp persist a reboot on CentOS 7 and firewalld?
I'm stumped. I've seen the related questions about editing /etc/sysconfig/iptables-config, but I'm running CentOS 7 (and webmin/virtualmin), which uses firewalld instead of iptables.
How do I get ...
- 243
2
votes
2
answers
2k
views
Filtering bad tcp flag packets in CentOS 8
I am using CentOS 8 and want to drop bad tcp flag packets like they were done in CentOS 6 using iptables tcp-flags.
Below are example packet drop done in CentOS 6 using iptables tcp-flags
-A INPUT -p ...
- 143
1
vote
2
answers
1k
views
Use the LANs of one server to access the LAN of another
I'm a bit lost here, so I'm asking for your help. =D
I have three servers:
1# - LANs A and B
2# - LANs B and C
3# - LANs C and D
How can I make server 1# access through LAN B an ip that is in LAN D ...
- 664
1
vote
1
answer
8k
views
viewing firewalld logs via remote login to CentOS 7 server
I have firewalld installed in a remote CentOS server. When I log into the server over the internet as root, I type the following command to access the firewalld logs:
journalctl --output=json-...
- 5,199
0
votes
1
answer
436
views
CentOS 7: Firewalld ignores its configuration files
Why won't firewalld keep its configuration across restarts?
# systemctl start firewalld
# systemctl -l status firewalld
firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/...
- 1,458
0
votes
1
answer
9k
views
setting up a relay port for postfix smtp on CentOS 7
A CentOS 7 server has postfix, dovecot, and mailx installed. I am able to make an IMAP connection to the server from my remote Thunderbird client running on my local devbox. But I am not able to ...
- 5,199
13
votes
2
answers
47k
views
Show list of open ports using firewalld in CentOS7
Is there an easy way to show a full list of all the ports that have been opened using firewalld?
I know the command firewall-cmd --list-all, but that just shows service names, not the ports that ...
- 375
3
votes
1
answer
6k
views
How to use SNAT with firewalld (vs MASQ)
I have an Fedora 26 server I use as a gateway/router (Along with other things)
2 NIC's and a static external IP
I am used to iptables and I use SNAT vs MASQ
I have done a good bit of searching for ...
- 59
3
votes
1
answer
5k
views
assigning two ports to one service in firewalld
Is there a way to assign two ports to the same service in firewalld? For example, I would like for the SMTP service to listen on both port 25 and port 465. My first instinct is to change /usr/lib/...
- 5,199
2
votes
3
answers
1k
views
firewalld zone settings don't survive a reboot
My previous adventures with firewalld and zones are incomplete.
Specifying zones via nmcli only, verifying settings in /etc/sysconfig/network-scripts/ifcfg-*, and verifying settings not in /etc/...
- 1,458
1
vote
1
answer
2k
views
multiple user-types/access-rules for OpenVPN on CentOS 7 and firewalld
How can I define separate roles for users and administrator in OpenVPN running on CentOS 7 server? Specifically, the users must only be allowed to https, while the administrator must be allowed to ...
- 5,199
1
vote
2
answers
7k
views
Fedora 21 Port Forwarding with firewalld (firewall-cmd); how does it REALLY work? Or, does it?
Fedora's ability to forward ports using the apparently "native" networking software, firewalld, appears to continue to be broken beyond credulity. Please note that it hasn't really worked since at ...
- 192
0
votes
1
answer
804
views
fail2ban / FirewallD error: invalid port/service `1-65535' specified
I am running a CentOS 8.4 server. When I do a systemctl status firewalld I see the daemon is active and running, but I see the following error repeated five times:
ERROR: '/usr/sbin/iptables-restore -...
- 53