Questions tagged [firewalld-zone]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
11 views

Firewalld without interfaces on public zone

On my Oracle Cloud server, the public zone has no interfaces attached, neither does any of the other zones. But still if I allow a port in the public zone, it does allow the traffic through. So why is ...
user avatar
  • 243
0 votes
1 answer
48 views

firewall-cmd - adding 0.0.0.0/0 as a source in one zone blocks more specific access in another zone

I have two firewalld zones configured as follows: zone: ssh-access source: 1.2.3.4 ports: 9999/tcp zone: other-access source: 5.6.7.8 ports: 8888/tcp We temporarily want to unrestrict access to the ...
user avatar
  • 101
0 votes
0 answers
33 views

FirewallD block some IPs and allow all the rest

I'm new in firewallcmd managment, so probably I'm asking a simple question. What I have to do is allow all incoming connections except for some IPs. To block IPs I used the "block" zone: ...
user avatar
  • 101
0 votes
0 answers
18 views

Firewalld show rich rules without zone

may someone could help me with firewalld. I need to add rich rules with no associated zone, as the source / destination networks are all remote. For example: firewall-cmd --add-rich-rule='rule family=&...
user avatar
0 votes
1 answer
998 views

How to add a new zone in firewalld without blocking `port=80/tcp` in `zone=public` in Ubuntu 20.04

I'm not too familiar with firewalld, but I thought I'd try it out on Ubuntu20.04. The problem I'm having is that port=80/tcp in zone=public gets blocked every time I try to add a new zone. So my ...
user avatar
  • 7,063
0 votes
2 answers
145 views

Templating firewalld zones with ansible - issue with xml or vars

Templating firewalld zones with ansible - issue with xml manipulation I am running into a small bit of confusion for the rule family. whats in my CORRECTED vars file: firewalld_zones: - name: ...
user avatar
  • 1
1 vote
0 answers
243 views

using Firewalld , trying to allow all ports that come in on an internal ip

I am building a new server and i am using Firewalld for the first time. I have a loadbalancer that takes public ip requests and routes them to one of my servers with internal IPs These servers have ...
user avatar
  • 141
0 votes
0 answers
1k views

firewalld allow ssh only from one predefined IP host or AS number net

I am using CentOS Linux release 7.9.2009 in minimal installation and firewalld . [root@centosmin firewalld]# uname -a Linux centosmin 3.10.0-1160.6.1.el7.x86_64 #1 SMP Tue Nov 17 13:59:11 UTC 2020 ...
user avatar
  • 143
0 votes
0 answers
124 views

How to get an IP address blocked with firewall-cmd with immediate effect?

I am having a problem, with dropping traffic using FirewallD. I start a continuous ping from host1.example.com (192.0.2.101) to host2.example.com (192.0.2.102), and when I execute either of the below ...
user avatar
  • 1
4 votes
0 answers
3k views

IPsets in FirewallD with Nftables backend

I upgraded my server to Fedora 32. Firewalld has switched the backend to Nftables. My setup is pretty simple. Just HTTP, HTTPS, SSH, SMTP ports open and multiple IPsets (IPv4, IPv6) to block a preset ...
user avatar
2 votes
0 answers
834 views

firewalld: two NICs, two zones. Zone is ignored

I have a server running CentOS/RHEL 7.7 with two network interfaces. These interfaces are configured and work properly. The first interface, ens33, is part of the firewalld "public" zone. All the ...
user avatar
0 votes
1 answer
245 views

block ping 8.8.8.8 in firewalld

Working from my Arch Console (having not yet installed Openbox), I've installed firewalld, sudo pacman -S firewalld, then, to check that it's overall working, firewall-cmd --panic-on correctly blocks ...
user avatar
  • 103
0 votes
1 answer
1k views

Issue with firewalld

I just came across this issue and it's late here so I can't really think straight anymore right now. Still this is something pretty simple so I'm not really seeing what I'm missing and just going nuts ...
user avatar
2 votes
1 answer
4k views

Firewalld block http traffic even if activated

I'm trying to configure a simple test environment with 3 machines : One Kali to simulate internet : IP = 10.99.0.2 One CentOS that acts as a firewall using firewalld : IPs = 10.99.0.1, 10.4.1.1 One ...
user avatar
1 vote
1 answer
404 views

firewalld puppet module unable to add multiple sources error: INVALID ZONE on second source

We have a puppet module (v3.6.2 as we're using it for Satellite 6) The module works as expected, except when adding multiple sources to a zone. It will add the zone and then add one souce, then error ...
user avatar
  • 11
5 votes
2 answers
63k views

FirewallD : Allow connections only from certain IP addresses [duplicate]

I am trying to use FirewallD to restrict access to a CentOS server from other machines on the network. It has a single network interface and it is operating in the public zone. Lets say that the ip ...
user avatar
1 vote
1 answer
127 views

How to configure firewalld for source-specific rules?

I have a server in a datacenter that serves as an IPA master and VPN server. For simplicity, assume I need to enable the "ipsec" service for VPN, and the "kerberos" service for IPA. I would like to: ...
user avatar
12 votes
3 answers
21k views

firewalld not listing any active zones?

When running [root@host ~]# firewall-cmd --get-active-zones [root@host ~]# [root@host ~]# firewall-cmd --get-default-zone public I am not getting any active zones. How can I activate a zone?
user avatar
  • 1,737
1 vote
0 answers
901 views

Firewalld: Sources in Drop and Block zones

I can't get the services attaches to the block zone working for sources attached to those zones. I was wondering what the inteded purpose of source->zone<-service was..! I was trying to use the ...
user avatar
  • 121
2 votes
1 answer
398 views

Firewalld management

As I asked it on this topic's comments: block all but a few ips with firewalld I'm looking for a way to deny all public IPs except for mine on the public zone of firewalld. For now, my public zone ...
user avatar
  • 943
4 votes
2 answers
4k views

Fedora 21: Firewalld (firewall-cmd) won't PERMANENTLY assign interfaces to zones?

I installed Fedora on this one machine which is EXCLUSIVELY a gateway / firewall system. Following installation, I ran 'yum upgrade', and so it should be up to the very latest Fedora 21 - I'm a ...
user avatar
  • 1,128