Questions tagged [firewalld-zone]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Is firewalld zone source nesting supported?

Two zones can’t share the same source, but (for example) firewalld let’s us create 3 zones with sources of 10.0.0.0/8, 10.10.10.0/24, and 10.10.10.57/32, respectively. Is this supported? It’s ...
0
votes
0answers
101 views

How to add a new zone in firewalld without blocking `port=80/tcp` in `zone=public` in Ubuntu 20.04

I'm not too familiar with firewalld, but I thought I'd try it out on Ubuntu20.04. The problem I'm having is that port=80/tcp in zone=public gets blocked every time I try to add a new zone. So my ...
0
votes
2answers
62 views

Templating firewalld zones with ansible - issue with xml or vars

Templating firewalld zones with ansible - issue with xml manipulation I am running into a small bit of confusion for the rule family. whats in my CORRECTED vars file: firewalld_zones: - name: ...
1
vote
0answers
77 views

using Firewalld , trying to allow all ports that come in on an internal ip

I am building a new server and i am using Firewalld for the first time. I have a loadbalancer that takes public ip requests and routes them to one of my servers with internal IPs These servers have ...
0
votes
0answers
185 views

firewalld allow ssh only from one predefined IP host or AS number net

I am using CentOS Linux release 7.9.2009 in minimal installation and firewalld . [root@centosmin firewalld]# uname -a Linux centosmin 3.10.0-1160.6.1.el7.x86_64 #1 SMP Tue Nov 17 13:59:11 UTC 2020 ...
0
votes
0answers
69 views

How to get an IP address blocked with firewall-cmd with immediate effect?

I am having a problem, with dropping traffic using FirewallD. I start a continuous ping from host1.example.com (192.0.2.101) to host2.example.com (192.0.2.102), and when I execute either of the below ...
0
votes
0answers
18 views

Firewalld and Rich rules

After some general good practice w/firewalld, as I have a set up which feels like it might a bit of a kludge. Public zone - has interface assigned, set to 'drop'. Internal zone - initially set up one ...
4
votes
0answers
2k views

IPsets in FirewallD with Nftables backend

I upgraded my server to Fedora 32. Firewalld has switched the backend to Nftables. My setup is pretty simple. Just HTTP, HTTPS, SSH, SMTP ports open and multiple IPsets (IPv4, IPv6) to block a preset ...
2
votes
0answers
479 views

firewalld: two NICs, two zones. Zone is ignored

I have a server running CentOS/RHEL 7.7 with two network interfaces. These interfaces are configured and work properly. The first interface, ens33, is part of the firewalld "public" zone. All the ...
0
votes
1answer
156 views

block ping 8.8.8.8 in firewalld

Working from my Arch Console (having not yet installed Openbox), I've installed firewalld, sudo pacman -S firewalld, then, to check that it's overall working, firewall-cmd --panic-on correctly blocks ...
0
votes
1answer
1k views

Issue with firewalld

I just came across this issue and it's late here so I can't really think straight anymore right now. Still this is something pretty simple so I'm not really seeing what I'm missing and just going nuts ...
2
votes
1answer
3k views

Firewalld block http traffic even if activated

I'm trying to configure a simple test environment with 3 machines : One Kali to simulate internet : IP = 10.99.0.2 One CentOS that acts as a firewall using firewalld : IPs = 10.99.0.1, 10.4.1.1 One ...
1
vote
1answer
345 views

firewalld puppet module unable to add multiple sources error: INVALID ZONE on second source

We have a puppet module (v3.6.2 as we're using it for Satellite 6) The module works as expected, except when adding multiple sources to a zone. It will add the zone and then add one souce, then error ...
5
votes
2answers
57k views

FirewallD : Allow connections only from certain IP addresses [duplicate]

I am trying to use FirewallD to restrict access to a CentOS server from other machines on the network. It has a single network interface and it is operating in the public zone. Lets say that the ip ...
1
vote
1answer
112 views

How to configure firewalld for source-specific rules?

I have a server in a datacenter that serves as an IPA master and VPN server. For simplicity, assume I need to enable the "ipsec" service for VPN, and the "kerberos" service for IPA. I would like to: ...
11
votes
3answers
16k views

firewalld not listing any active zones?

When running [root@host ~]# firewall-cmd --get-active-zones [root@host ~]# [root@host ~]# firewall-cmd --get-default-zone public I am not getting any active zones. How can I activate a zone?
1
vote
0answers
829 views

Firewalld: Sources in Drop and Block zones

I can't get the services attaches to the block zone working for sources attached to those zones. I was wondering what the inteded purpose of source->zone<-service was..! I was trying to use the ...
2
votes
1answer
370 views

Firewalld management

As I asked it on this topic's comments: block all but a few ips with firewalld I'm looking for a way to deny all public IPs except for mine on the public zone of firewalld. For now, my public zone ...
4
votes
2answers
4k views

Fedora 21: Firewalld (firewall-cmd) won't PERMANENTLY assign interfaces to zones?

I installed Fedora on this one machine which is EXCLUSIVELY a gateway / firewall system. Following installation, I ran 'yum upgrade', and so it should be up to the very latest Fedora 21 - I'm a ...