Questions tagged [firewalld]

Firewalld is an open source firewall solution available on several linux distributions. Firewalld uses D-BUS for monitoring and dynamic management.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Deny port redirection based on source IP - firewalld

I'm trying to forward a port to an external IP using firewall-cmd, but I need to deny access from certain ips. To setup a port-forward of port 55500, I use: firewall-cmd --permanent --zone=public --...
0
votes
1answer
40 views

CentOS 8.1: Forwarding OpenVPN Clients to LAN without NAT

So there's an OpenVPN Server with multiple clients, which I successfully divided into multiple subnets. 10.0.30.0/26 for generic clients which are only allowed to communicate with the OpenVPN Server ...
0
votes
0answers
15 views

How to deal with relatively high cpu usage of firewalld?

on a remote host, I notice that the firewalld has a relatively high cpu usage ranging between 15%-30%, I think is is not normal coz there is not so much incoming/outgoing traffic, how to deal with it? ...
0
votes
0answers
92 views

How to tunnel all traffic through shadowsocks with v2ray config?

Recently I was working ShadowSocks with V2ray plugin, but there was a problem since I encounter routing all the system traffic through ShadowSocks The problem is I don't know to forward the whole ...
1
vote
0answers
24 views

Firewalld: allow only certain source and destination port pairs

I am using firewalld to configure my firewall. I tried to create a service that allows a specific pair of source and destination ports: <?xml version="1.0" encoding="utf-8"?> <service> &...
0
votes
0answers
33 views

Proper way to use firewalld with Docker/Docker Swarm

Regarding to Docker/Docker Swarm and firewalld we have various ways to configure access to containerized services from outside, connections between various docker networks and access from containers ...
0
votes
1answer
39 views

How can I block (ssh) traffic from source ports other than a pre-defined one?

A VPS get lots of ssh attacks. Those attacks are various source ports: sshd[76661]: Invalid user ts3server from 76.103.161.19 port 33062 sshd[76661]: Received disconnect from 76.103.161.19 port 33062:...
0
votes
0answers
25 views

remote vm can't start after installing firewalld and iptables was already installed

i installed firewalld and enabled it on remote vm that uses centos7 ( access it using ssh ) but after rebooting it i can't access it before installing firewalld i didn't check if tptables was ...
0
votes
1answer
84 views

/var/log/firewalld is not getting rotated

I am not sure why this particular file is not getting rotated. It is not a directory. Any ideas? The size of the firewalld file: $ ls -alh /var/log -rw-r--r--. 1 root root 134M Jan 31 13:49 ...
0
votes
1answer
66 views

I can send E-Mails but not receive E-Mails.. | CentOs - Docker - poste.io

I run a Server on CentOs 7 with FirewallD, on there i run Docker with Poste.io Mailserver. (SQLite, Dovecot, NGiNX, Haraka, RSPAMD, ClamAV, Roundcube, Z-Push) Soo my problem is i can´t receive E-...
0
votes
0answers
24 views

How to transform a iptables rule to firewalld rich_rules?

I have this rule in iptables -t nat -A POSTROUTING -s <source> -o <interface> -j MASQUERADE I understand the rule, I just want to transfer it to a rich rule, so I can use it in ansible ...
0
votes
0answers
30 views

Ubuntu uwf blocking ports with open rules

Heres my IPchains I dont know why this occurs but I've been trying to contact 8192 even with an allow 8192/tcp rule and it wont let me connect to it. I turned off ufw and it worked! Any resolutions so ...
0
votes
0answers
116 views

Firewall-cmd: Need to include subnet?

I am prepping for the RHCSA exam and I am moving through some of the guided labs that are apart of the official Red Hat training. One of the questions is having me perform the following: On serverb,...
0
votes
1answer
55 views

Trouble using SCP command

After successfully establishing a ssh connection between two Ubuntu systems via ssh chh1@192.168.1.67 from a local machine with user name chh2 I tried copying a file from my server with the ...
0
votes
1answer
35 views

CentOS 7 - Load settings for iptables at OS startup

I would like to load the settings below for iptables on CentOS 7 at OS startup using a bash script. How can I do this? #!/bin/bash iptables -I OUTPUT -d 0.0.0.0/0 -j ACCEPT iptables -I FORWARD -d 0....
4
votes
1answer
2k views

firewall-cmd - add-forward-port don't work

I have a KVM server (host) with multiple virtual machines (guests). My goal is my host forward port 222 to port 22 of a guest running an ssh service. This works... iptables -I OUTPUT -d 0.0.0.0/0 -...
0
votes
0answers
12 views

CentOS - Forwarding all ports except one

It is possible to forward all ports (TCP/UDP) in a CentOS server except by the ssh/sftp port (TCP port 22). If it is possible how can I do this? I thought in something using "FirewallD". Thank you! ...
1
vote
0answers
48 views

Routing Issue Between Interfaces under CentOS7/Firewalld

I use a Linux PC as my Internet gateway; it's running a fresh installation of CentOS 7 x64. I have one subnet (192.168.2.0/24) which is my regular Home network, and I have a second, separate subnet (...
0
votes
0answers
81 views

firewalld restrict outgoing port 53 from a certain IP addresses

I'm in the process of setting up an internal hosted DNS server (and a second fail-over in the future) which will act as a DNS cache and house internal records for my network, for which I want all ...
0
votes
1answer
53 views

firewalld - change destination of outgoing http and https requests from local process

I have a process that listens for incoming port 80 and 443 traffic and then sends it out to an extranet recipient. It's a proxy but I don't want to use that term because I need to send ITS outgoing ...
0
votes
1answer
380 views

Blacklist list of IPs from File Centos 7.5

I've to deny access from set of IP set from specific country and downloaded the list from http://www.ipdeny.com/ site. I tried to block this set using firewall-cmd --permanent --ipset=blacklist --...
0
votes
1answer
627 views

Linux - FirewallD - Why is ping blocked?

I know that the drop zone (my default zone) in FirewallD blocks all incoming traffic, including icmp, so also ping. The FedoraWorkstation zone, does not block icmp. But where can I see this? If apply ...
1
vote
1answer
206 views

Ho to route one subnet to another using firewalld CentOS 7

I have a CentOS 7 system, with a VPN host and one physical network interface. I have my physical network interface assigned to public zone, while my VPN requests are going through trusted. Also, I ...
3
votes
1answer
5k views

How can I configure firewalld to block all outgoing traffic except for specific ports while allowing localhost to access any of its own local ports?

I'll confess at the start that I'm asking this question only after finding the answer and wanting to share it with everyone else. If this is bad form, then my sincere apologies and I'm open to the ...
-1
votes
1answer
1k views

Whitelist websites for specific user on linux?

Due to a child protection and safeguarding issue, I want to set up a restricted or limited account for a tech-savvy teenager to use. I would like to whitelist only specific websites (e.g. iPlayer and ...
0
votes
1answer
500 views

Can I block internet access of a single app with firewalld?

Is it possible to prevent a single app to access the internet with firewalld? To be precise, i have an application packaged as an AppImage, currently installed in my Home directory, and I want it to ...
0
votes
1answer
517 views

How to make UFW work with firewalld on CentOS 7?

I've installed UFW on a fresh CentOS 7 installation, but it doesn't open the ports. I'm configuring UFW as I would on a Debian system: sudo ufw default deny incoming sudo ufw default allow outgoing ...
3
votes
1answer
679 views

Setting up rules in firewalld to allow clients in the same VPN subnet to communicate

I am trying to setup a Wireguard VPN on a Fedora server. I have it up and running and can connect with multiple clients, browse through it, ssh into the server etc. In general it just works. Except ...
3
votes
0answers
1k views

Docker container can't make DNS queries with FirewallD running

While FirewallD is running, all DNS queries fail and are blocked by the firewall. Running tcpdump -i docker0 while running ping google.com in a container shows me 21:27:02.683342 IP 172.17.0.2.35118 &...
0
votes
1answer
33 views

New Linux install, can't get ssh or http connections working, connections are made but drop?

So, I / we have brand new Fedora Core 28 installation we've been trying to bring online. The installation went perfectly so far as we could tell. It has two network cards, one for an internal net, one ...
0
votes
1answer
1k views

firewall-cmd configure destination NAT

I am trying to configure destiation NAT on a RHEL 7.4 server. I want any traffic generated for 10.10.10.10:443 to go to 10.20.20.20:443. After some Googling I used following direct rule: firewall-...
1
vote
1answer
423 views

firewall-cmd blocking snmp

I inherited a system that has rules implemented with firewall-cmd, it has the below rules. Another system is trying to connect to snmp port (UDP/161) but is not able (my server is responding with ICMP ...
1
vote
1answer
316 views

Per client firewall settings

I've successfully set up an OpenVPN-Server and can connect to it from the internet. Now I'm trying to implement per-client firewall rules so different clients can only connect to certain addresses in ...
0
votes
1answer
66 views

How to create a firewall rule, to block a website for a particular user? [closed]

can anybody helps me to make a firewall rule to block a particular website for a particular user. i have a Linux operating system am trying to make that OS like a firewall.
2
votes
2answers
2k views

Firewalld block / drop and allow by IP

We have a linux root server which primarily just is a docker server. Hosting containers and a CI runner. To protect this server the basic idea for now is to block all traffic except for one (or more)...
1
vote
1answer
2k views

How to open a UDP port in the Centos 7 firewall, firewalld, using firewall-cmd?

Centos 7 server. Trying to open port 3000 for UDP, nodejs ws websockets. Any ideas? I'm stuck! I've checked a few other SO posts to no avail. Thx, Keith =) If is stop the firewall, the udp unicast ...
1
vote
0answers
3k views

TFTP Server With Red Hat 7

How do I set up a TFTP Server w/ Red Hat 7? This is a fresh VM install of RHEL 7.3. I'm using the RHEL 7 Installation Guide instructions at https://access.redhat.com/documentation/en-US/...
-1
votes
2answers
1k views

Fedora firewalld issues with docker

I'm running a service inside docker listening on port 8081. I can access this service on the fedora server itself, but anything else on the network gets a timeout. If I turn off firewalld, the issue ...
0
votes
1answer
3k views

firewalld, only allowing SSH from specific IP which is part of a different zone

My goal is to serve ldap to every client on 172.26.143.0/24 but SSH must only be available to 172.26.143.3. I have tried with the following: # This is where eth0 is and no services/ports are assigned ...
3
votes
2answers
42k views

Getting firewalld to allow ping requests

On CentOS 7, I have installed and setup firewalld as follows: Add ssh service to drop zone permanently (sudo firewall-cmd --zone=drop --permanent --add-service=ssh) Make drop zone the default zone so ...
7
votes
1answer
3k views

Opening a port with firewalld doesn't seem to work

I have configured sshd to live on a different port. I have opened that port using firewalld: $ sudo firewall-cmd --zone=public --add-port=22000/tcp --permanent Listing rules shows port 22000 is ...
0
votes
1answer
781 views

http://127.0.0.1 returning 401 Unauthorized

I have a CentOS 7 box and have a service running on port 32400 (Plex Media Server) which is trying to pull some information via HTTP to http://127.0.0.1:32400/library/changestamp but a 401 response is ...
1
vote
1answer
619 views

firewalld and localhost address translation

I have a server with red hat 7.1 which has two ip addresses, a public one available on internet on interface bond1 and a private one on the corporate lan on interface bond0. I have apache 2.4 ...
1
vote
0answers
125 views

Linux Fedora run Firefox via pkexec sound issue

I would like to setup my Fedora Linux install so that I have control over outgoing traffic on a per application basis. In order to achieve this I have setup an firewall policy to drop everything from ...
6
votes
1answer
14k views

Configure FirewallD to allow bridged virtual machine network access

I have a Windows guest running on a virt-manager QEMU/KVM virtual machine. My primary NIC eno1 is in a bridge br1 which is configured with my host IP address configuration. This VM is connected to ...
2
votes
1answer
7k views

using firewalld and firewall-cmd how to add-rule to primary INPUT chain not INPUT_direct

so after reading the firewalld man page and fedora documentation, I have come to the understanding that to add a custom rule to firewall with specific arguements i need to use the structure firewall-...
6
votes
1answer
3k views

How to block docker-mapped ports with a firewall from outside the host without messing up docker routing inside the host?

I have a docker container running on a host with some port mapped to a port on the host. docker run -d -p 9009:9009 someserver I want this machine firewalled off from the internet except for 80, ...
1
vote
1answer
2k views

Port forwarding to VM using firewalld

I have been looking and not able to find anything about how to solve this problem. I am trying to set up port forwarding to a VM (qemu) on a CentOS 7 Server. Tying to forward anything incoming on ...
3
votes
1answer
152 views

Configure firewalld to distinguish home and public ethernet connection

I connect my notebook via ethernet at home and outside. I want to open some ports for services like samba only at home and not somewhere else. How can i let firewalld automatically detect where i am, ...
1
vote
1answer
5k views

I can't configure firewalld with my custom rule xml

Centos7: I dropped my xml in /etc/firewalld/services when running firewall-cmd --permanent --zone=public --add-service=rules.xml all i get is "Error: INVALID_SERVICE: rules" When running firewall-...