Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [firewalld]

FirewallD is a firewall service daemon with D-BUS interface managing a dynamic firewall. First used in Fedora 18, it is expected to be the default firewall tool for future versions of Enterprise Linux.

Filter by
Sorted by
Tagged with
1 vote
1 answer
19 views

How to change default firewalld behaviour to drop all established connections on reload

I have a web-server and sshd services running and listening for connections on their ports. What I want to achieve is when I change my zone from public to something that prohibits ports 22 or 443, my ...
user avatar
0 votes
1 answer
21 views

Linux centos firewall commands not found

firewalld-cmd--add-service=http--zone=public--permanent firewalld-cmd--add-port=80/tcp--zone=public--permanent firewalld-cmd--reload``` lamps: line 16: firewalld-cmd--add-service=mysql--zone=public--...
user avatar
0 votes
1 answer
15 views

Docker-ce oppening Firewalld ports on rocky 8

Docker-cd, when run with -p 3010:3010 bypass the firewall and open the container port to the world... If i disable docker and run a python -m http.server, the port is blocked to the outside (as it ...
user avatar
  • 103
1 vote
0 answers
141 views

Issues between docker and firewalld/iptables

OpenSUSE 15.3 user here. I broke the default rules created by docker on iptables and can't figure out how to repair this. I tried reinstalling docker already. Here is what happens: vm-dev:~ # ...
user avatar
  • 73
0 votes
1 answer
29 views

Firewall / Ip rule issues between two hosts via vSwitch

I have two servers in play here, one is a Qemu VM host, the other being a storage box of sorts. They are hetzner machines, and I have them connected via a vSwitch. Server1 vSwitch interface: 3: local@...
user avatar
0 votes
1 answer
34 views

How to block all traffic on a VM except host IP?

I am running a Vagrant VM and am trying to have a network isolated mode. Since disabling or changing anything with the default NAT interface breaks Vagrant I decided to block ALL traffic inside the ...
user avatar
  • 11
0 votes
0 answers
18 views

Firewalld not blocking https requests on port 443

Running a LEMP server on ubuntu 20.04 with firewalld as the firewall. Some Wordpress sites are installed. Sometimes an ip is hammering the xmlrpc.php creating higher loads. To block an ip: firewall-...
user avatar
0 votes
0 answers
49 views

firewalld: outgoing NTP connection will be logged as blocked, but isn't blocked

I have configure firewalld on CentOS7 so it blockes all outgoing connections. Only the needed connections are white listed by adding some rules. Also I have add rules to enable logging of blocked ...
user avatar
  • 929
0 votes
1 answer
117 views

firewalld: logging of blocked outgoing connections

I have configured firewalld so that the firewall will blockes also outgoing connections. The outgoing traffic I need I have white listed by adding specific rules. This works fine. But now I want to ...
user avatar
  • 929
0 votes
0 answers
30 views

Ports are shown as openedin firewall-cmd, but nmap scans shows they are closed

I am using OpenSuse Leap 15.3, with vicibox v10. I have surfed vicidial fourms, but it seems to be an issue with OpenSuse. I have opened ports with firewall-cmd, following are the output. vicibox10:~ #...
user avatar
0 votes
1 answer
67 views

How do I display the entire firewalld state?

I'm trying to work out why a firewall is not behaving as I think I've asked it to behave, and thus trying to work out how to get firewalld to show its complete set of rules, in some format resembling ...
user avatar
0 votes
1 answer
32 views

firewall-cmd - adding 0.0.0.0/0 as a source in one zone blocks more specific access in another zone

I have two firewalld zones configured as follows: zone: ssh-access source: 1.2.3.4 ports: 9999/tcp zone: other-access source: 5.6.7.8 ports: 8888/tcp We temporarily want to unrestrict access to the ...
user avatar
  • 101
1 vote
1 answer
247 views

No connection to Kafka from Faust client

I am having a hard time connection to a machine running Kafka from a client running a Faust script.The script looks like this: import faust import logging from asyncio import sleep class Test(faust....
user avatar
0 votes
0 answers
24 views

FirewallD block some IPs and allow all the rest

I'm new in firewallcmd managment, so probably I'm asking a simple question. What I have to do is allow all incoming connections except for some IPs. To block IPs I used the "block" zone: ...
user avatar
  • 101
0 votes
1 answer
93 views

Block port 22 on specific Docker container

I have multiple Docker containers on a Centos 7 host and all their network interfaces are added to the Docker firewalld zone. I only want to block one of the containers from accepting traffic on port ...
user avatar
0 votes
1 answer
47 views

CentOS firewall-cmd script to only allow access from IPs listed in sources

I use this script to set up my firewall. I expected to have ssh access from only one IP but that is not the case after testing. What is missing? #!/bin/bash # # Reset to initial install of firewalld # ...
user avatar
  • 121
0 votes
0 answers
140 views

How to reload firewalld without loosing Libvirt iptables forwarding rules

It's been well know that firewalld will flush Libvirt rules upon reload and thus making port forwarding to VMs broken until you restart libvirtd. Here is what I did: Create /etc/systemd/system/...
user avatar
1 vote
1 answer
142 views

firewalld: blocking outgoing connections blocks also incomming connections

log4shell has caused us to improve the security of some servers. We want now also block outgoing traffic (as possible). The current firewall rules are: /> firewall-cmd --list-all public (active) ...
user avatar
  • 929
0 votes
1 answer
375 views

Firewalld Blocking SSH between Clients on WireGuard LAN

What needs to be allowed in firewalld so that WireGuard clients can connect to each other via SSH? The Setup I have two clients and a server on a WireGuard VPN network. All of them are running Debian ...
user avatar
0 votes
1 answer
170 views

firewalld port forwarding not working in CentOS 7

In my server I wanted to redirect all request: come from 81 to 8080 port Because Jenkins service is not allowed listened at 80 port, I follow Jenkins doc Jenkins - Reverse proxy using firewalld. But ...
user avatar
  • 101
0 votes
1 answer
49 views

Centos 7 OpenVPN - FirewallD keeps putting tun0 in the wrong zone on reboot

I have a fresh install of Centos 7 and I have several things running on it. One of them is OpenVPN. Everything works fine, I have tun0 in the trusted zone and my nic (eno1) is public. Server is behind ...
user avatar
  • 1
0 votes
1 answer
43 views

Which protections can I use on the server

I have read about server protection and I know how to work with fewalld protection because it is not demanding. My question is: Which of the following protections is best for the server and which of ...
user avatar
  • 17
0 votes
1 answer
43 views

Attach port to domain name [duplicate]

I run a small (centOS 7) mail server at home and I would like to attach ports to a domain name instead of opening up for every incoming connection of the server-IP. Currently, when I open up port 25/...
user avatar
  • 3
0 votes
1 answer
144 views

how to use firewalld in stateful mode

I have to setup an stateful firewall on centos8 using firewalld. I'm new to firewalld but have experience with old style iptables for this purpose. since it is recommended by Redhat here I prefer to ...
user avatar
1 vote
0 answers
41 views

nginx local reverse proxy with firewalld

I am running a service on a docker container. The service is exposed on a given port (eg. 12345). On top of it I added a nginx reverse proxy to get extra functionality like HTTPS and HTTP/2. nginx ...
user avatar
  • 111
0 votes
0 answers
17 views

Firewalld show rich rules without zone

may someone could help me with firewalld. I need to add rich rules with no associated zone, as the source / destination networks are all remote. For example: firewall-cmd --add-rich-rule='rule family=&...
user avatar
0 votes
0 answers
125 views

Port forwarding while preserving the source IP address with firewalld

I signed up with a new ISP and they dont provide me with a external IPv4 address. Ive set up a virtual server (S) (that has an address) to relay all my stuff to my box at home (B) using a wireguard ...
user avatar
1 vote
1 answer
99 views

How to block a internal host from the internet with firewalld by MAC address

I am trying to stop some hosts on the network from going outside/calling home. So I have 2 zones. [root@eagle ~]# firewall-cmd --get-active-zones external interfaces: enp2s0 internal interfaces: ...
user avatar
0 votes
3 answers
120 views

How to Accelerate Firewalld or should it be abandoned for nftables instead?

We have a problem where we set up a server running a service and it is capable of hundreds of simultaneous connections on port 3535 (arbitrarily assigned for this application). We have firewalld ...
user avatar
  • 61
0 votes
1 answer
561 views

Firewalld port forwarding Proxmox makes port unusable for other connections

I have a server hosted by hetzner with a single public ip address which runs proxmox and some VMs. This ip address is configured inside /etc/interfaces like this: auto enp35s0 iface enp35s0 inet ...
user avatar
0 votes
0 answers
149 views

How to forward all trafice from microk8s cluster through firewalld?

I have a microk8s cluster on a Centos8 host. The host uses iptables-legacy and firewalld. I have troubles getting the cluster to talk with the internet, and recently found that these two tools are ...
user avatar
  • 111
2 votes
1 answer
410 views

iptables flushed on firewalld reload

I’m running on Rocky Linux (RHEL8 based) and am kind of struggling with firewalld and iptables. Well, not really iptables anyway… Let me explain. I setup a K8S cluster on VMWare ESXi with six virtual ...
user avatar
0 votes
2 answers
116 views

Masquerade / firewalld target : impacts on filtering?

I opened a question here, but as I found some new elements, I prefer to open a new one. Here is my situation, that can be reproduced: Fresh Centos7 OS. Configuration of two interfaces eth1 and eth2 ...
user avatar
0 votes
0 answers
136 views

Linux Kernel IP Forward activated, firewalld is bypassed?

On a Linux Centos7, I have some traffic that is routed with static routes from one interface to another. I did notice that with firewalld activated, both interfaces added in a zone, and nothing ...
user avatar
2 votes
1 answer
330 views

Why is firewalld allowing public traffic to my non-public ports, bound to Docker containers?

I'm trying to implement a pretty simple firewall in Fedora, where the public internet can access SSH, HTTP, HTTPS and Cockpit, but nothing else. Meanwhile, the servers run microservices via Docker ...
user avatar
0 votes
0 answers
86 views

How do I block UPnP except for a select group of IP addresses?

I have researched on here and Googled a lot of stuff but I cannot get an answer to blocking UPnP. One of our security scan declares UPnP is a vulnerability and to restrict access. I have been trying ...
user avatar
0 votes
0 answers
25 views

firewalld: open by default, closed for a range, but open for a sub-range

As the title says: our CentOS system should in principle be accessible by everyone, but we have to block a range with a lot of unwanted activities (say 45.0.0.0/8), and then we want to allow a sub-...
user avatar
  • 193
2 votes
1 answer
76 views

How do you port forward a privileged sub-1024 port to a non-privileged 1024+ port with firewalld?

The Question How do you port forward a privileged sub-1024 port to a non-privileged 1024+ port with firewalld? The Reason Why we are doing this? We want to be able to switch the non-privileged 1050 ...
user avatar
0 votes
0 answers
82 views

Need firewalld equivalent command for this iptable command for forwarding traffic to another IP and port

Since we are using firewalld on our Oracle Linux 8.4 machines, I need a command equivalent to this IPTable command, iptables -t nat -A OUTPUT -d 192.168.xx.xxx -p tcp -m tcp --dport 53 -j REDIRECT --...
user avatar
0 votes
1 answer
112 views

How to allow an ip address to access a specific port on the server without blocking other traffic

First off, am using Firewalld and my configuration is as follows: All traffic is allowed (nothin fancy). Server has MySQL and Apache2 (Linux Debian) I need to allow MySQL remote connections to a ...
user avatar
  • 121
0 votes
1 answer
250 views

How do I forward all traffic arriving at a given port to another port?

How do I forward all traffic arriving at a given port to another port? Define the layout and the problem The layout Here is the layout of what I am trying to do... +--------+ +-----------------...
user avatar
0 votes
0 answers
38 views

need help converting an iptables command to firewalld

Guys how can I convert the following commands to firewalld accepted format ? iptables -A FORWARD -s 80.6.0.0/23 -p udp --dport 25 -j DROP iptables -A FORWARD -s 80.6.0.0/23 -p tcp --dport 25 -j DROP
user avatar
0 votes
0 answers
457 views

Which connections/interfaces are in zone 'docker'?

Executing the below command on Ubuntu 20.04 LTS sudo firewall-cmd --list-all-zone gives me these block, dmz, docker (active), drop, external, home, internal, public, trusted, work, The thing which ...
user avatar
1 vote
1 answer
441 views

Openvpn and Firewalld communication between zones

I spent a couple of hours today attempting to setup my vps in germany (runs centos8 and openvpn client+server) for this configuration: My vps has 3 NICs eth0 with public ip address 1.2.3.4 tun0 with ...
user avatar
0 votes
1 answer
67 views

How do I limit firewalld portforwarding to certain source addresses?

First off, I apologize if this has already been asked before but I wasn't able to find any answer looking through the info available on SE. My situation is as follows: I have one CentOS 7 server that ...
user avatar
0 votes
1 answer
218 views

Fail2ban with Firewalld on RHEL 8 - Fail2ban seemingly blocks IPs, but they are not really blocked

I'm running fail2ban on RHEL 8 using firewalld. According to the fail2ban log (with DEBUG level) it blocks IP addresses without any error, but in fact there are no such rules in firewalld and nftables....
user avatar
0 votes
1 answer
1k views

Firewalld Forwarding Functionality with Wireguard

I have asked before how to forward ports on a VPS running a wireguard service with ufw and iptables as the management. I had to do this: (56000 is a random port I chose) (10.66.66.2 is the internal ip ...
user avatar
0 votes
0 answers
13 views

can use psql on localhost but not on the server fully qualified name [duplicate]

From my server (Centos 8) data.mycompany.edu I can open a psql session using psql -h localhost -p 7432 -U myusername mydb However, if I use psql -h data.mycompany.edu -p 7432 -U myusername mydb I ...
user avatar
0 votes
1 answer
136 views

How do routing rules from IPTables, IPVS, and NFTables get ordered from a precedent perspective, in the Linux kernel?

The Linux kernel has the ability to route traffic using nftables, iptables, and ipvs. Ive collected 3 related questions here, in order to generally ask the broader overall question of how ...
user avatar
0 votes
1 answer
496 views

iptables doesn't seem to be stopped

I have a CentOS 7 computer, which originally uses iptables as its firewall configuration tool. The computer has a docker container that listens to port 10079. I want to use firewalld to replace ...
user avatar
  • 101

1
2 3 4 5
8