I would appreciate some assistance with configuring firewalld please. Here's a bit of background. All I want to do is prevent all access- except whitelisted IP addresses to a web application running on https.
I have done much googling. learnt a number of things but none has worked yet. Here's what I have done:
I can tell firewalld is running
# systemctl status firewalld firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled) Active: active (running)
# firewall-cmd –state running
I have the default zones
# firewall-cmd --get-zones block dmz drop external home internal public trusted work
My active zones include:
# firewall-cmd --get-active-zones public sources: 220.127.116.11 18.104.22.168/22 94.27.256.190
My default zone is public:
# firewall-cmd --get-default-zone public
The details of public are:
public (default) interfaces: sources: 22.214.171.124 126.96.36.199/22 94.27.256.190 services: http https ssh ports: masquerade: no forward-ports: icmp-blocks: rich rules:
My understanding is that the configuration for public zone above will restrict only grant to requests from any of the specified IP addresses. However, when I try accessing https://www.example.com from an IP outside the listed, it allows it.