28

I have just installed CentOS 7:

[root@new ~]# cat /etc/redhat-release
CentOS Linux release 7.1.1503 (Core)

I am trying to configure the firewall, and I'm told that in CentOS 7 iptables is no longer used, replaced by firewalld. When attempting to run a command to set a firewall rule as such:

firewall-cmd --add-port=80/tcp

I receive the following message:

[root@new ~]# firewall-cmd --add-port=80/tcp
-bash: firewall-cmd: command not found

edit: I tried the following command, too:

[root@new ~]# firewall-offline-cmd --add-port=80/tcp
-bash: firewall-offline-cmd: command not found

without any success.

I tried running the following to check that firewalld was installed:

[root@new ~]# service firewalld status
Redirecting to /bin/systemctl status  firewalld.service
firewalld.service
   Loaded: not-found (Reason: No such file or directory)
   Active: inactive (dead)

Following this output, I tried starting firewalld:

[root@new ~]# service firewalld start
Redirecting to /bin/systemctl start  firewalld.service
Failed to issue method call: Unit firewalld.service failed to load: No such file or directory.

Any ideas what is wrong with the CentOS 7 install? This is a clean install on an OpenVZ VPS, I'm yet to make any changes at all.

Improve this question
4
  • 3
    Have you tried installing firewalld?
    – Michael Hampton
    Jul 31, 2015 at 21:35
  • 1
    @MichaelHampton... Biggest facepalm of the week so far... I assumed since the service commands didn't flatout return "not found" like I've seen on debian it was installed but not configured or something, but you're correct, looks like it isn't installed.
    – BnMcG
    Jul 31, 2015 at 21:42
  • 2
    OpenVZ's default CentOS template is not standard; it's heavily customized and stripped down. (The same is true of all their other templates.) If something is missing, try installing it. And stop using OpenVZ based VPS providers as soon as possible; you are only going to run into more problems later...
    – Michael Hampton
    Jul 31, 2015 at 21:43
  • @MichaelHampton Ah that makes sense thank you, I was wondering why it wasn't preinstalled by default.
    – BnMcG
    Jul 31, 2015 at 21:44

3 Answers 3

Reset to default
35

Two possible options

  • Your PATH does not contain /usr/bin
  • firewall-cmd is not installed
    • yum install firewalld
Improve this answer
1
  • As commented above by @MichaelHampton OpenVZ's CentOS 7 template is stripped down and does not include firewalld by default. The answer is, of course, to install firewalld.
    – BnMcG
    Jul 31, 2015 at 21:47
35

Looks to me like you don't have it installed/enabled.

yum install firewalld
systemctl unmask firewalld
systemctl enable firewalld
systemctl start firewalld
Improve this answer
3
  • This is essentially the same as the previous answer.
    – kasperd
    Nov 14, 2015 at 21:27
  • 10
    This answer adds value by showing the commands to enable and start the service. I upvoted both answers.
    – isapir
    Mar 18, 2016 at 16:33
  • Though TBH I just found that the service is enabled by default.
    – isapir
    Mar 18, 2016 at 16:37
-3

Try the GUI tool instead, this util ships default with centos 6/7. firewalld is deprecated after centos5

$ sudo system-config-firewall

or 

# system-config-firewall

The system-config-firewall looks like this image

Improve this answer
2
  • 3
    This is backward. In CentOS 7, firewalld is the default and system-config-firewall is deprecated.
    – Michael Hampton
    Mar 15, 2017 at 7:01
  • The solution in my case was to install firewalld, it doesn't come with the OpenVZ image. Also, a GUI tool isn't available (at least readily) on a headless server.
    – BnMcG
    Mar 16, 2017 at 12:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .