In firewalld, I can assign a zone to an network interface. A zone contains some firewall rules.
Now I have a network interface with different levels of trust (172.16.1.1/32
should have special access in the 172.16.1.0/24
network). For example SSH access for an admin host.
The only way I found to realize that, is to use a rich rule. But I am not happy with this approach, because it's basically an iptables rule without the possibility to give a description. Is there a way to create a separate zone or subzone for the admin host?
The advantage would be, that the configuration is more readable.
I could create a ManagmentZone with special permissions. And when another Admin-PC
comes to life, I can simply add its address to this zone.
trusted
zone, or a new zone.