I wanted to create a zone named "bad" with a target=reject and source=10.100.0.0/24 which will basically reject all traffic from that subnet. In the zone.
Now, if I want to allow traffic to SSH from that subnet, how can I do that?
I tried adding service SSH to "bad" zone but no luck, then I tried to add a rich rule no luck...
I tried to do what a firewall would normally do, which is denying all request that didn't match any rule...
Thanks
10.100.0.0/16
. Show more details please. We need something likefirewall-cmd --zone=$(firewall-cmd --get-default-zone) --list-services
. What does this return? Subsequently, you could add the ssh service usingfirewall-cmd --zone=$(firewall-cmd --get-default-zone) --add-service=ssh
. Without more details, it's hard to troubleshoot the problemiptables
tofirewalld
(at least, I think that's what it's called; I cordially dislike systemd, so have steered clear of C7 so far).