Questions tagged [firewalld]
Firewalld is an open source firewall solution available on several linux distributions. Firewalld uses D-BUS for monitoring and dynamic management.
70 questions
2
votes
0
answers
51
views
Why is firewalld not blocking external IPs?
I’m trying to use Fail2Ban to secure a web server. In testing I send a bunch of requests from my home IP and I see Fail2Ban creating the entry in firewalld. But the block never does anything. I can ...
- 445
0
votes
1
answer
87
views
Notify firewalld of ipset created with `ipset`
I'm using aws-ipset-blocker, which creates ipsets AWS_IP4 and AWS_IP6 on the system, however, firewalld returns Error: INVALID_IPSET: AWS_IP4 when attempting to add it as a source to a zone. I ...
- 3
1
vote
1
answer
162
views
Understanding Firewalld (GUI) settings
When creating a service for Firewalld you will see the different tabs Ports Protocols Source-Port etc. (see screenshot). Now my issue is with understanding what the protocols tab is doing? When ...
- 173
0
votes
1
answer
2k
views
Port forwarding with rootless podman containers
I'm trying to run some rootless Podman containers. One of them is a reverse proxy and the others are the applications. Because I use rootless containers I can't use port 80 and 443 directly. So I've ...
- 11
2
votes
0
answers
116
views
Cannot redirect from Wireguard to VM
I have a bastion and a physical server. Both are linked through a Wireguard tunnel (wg0 as interface in both), with their IPs being respectively 172.16.0.0 and 172.16.1.0.
On the server, I have a VM ...
- 81
1
vote
1
answer
320
views
Firewalld cuts the maximum download speed
I have set up linux router with celeron j1900 processor, installed Arch Linux and firewalld. Connection to ISP is via PPPoE.
Firewalld is reducing maximum download speed, upload looks good:
When I ...
- 11
1
vote
1
answer
1k
views
Firewalld port redirect to rootless podman container
I'm having a podman container running rootless on port 8080 and 8443. But I want to have access to them on port 80 and 443.
This is working quite well with firewalld and this command:
firewall-cmd \
...
- 11
1
vote
1
answer
652
views
How can I setup FIREWALLD with IPSEC (StrongSwan) Site-to-Site to make PING work on Debian 12?
I have 3 nodes with public and local IP address, each:
Node A: edge router #1 (10.41.1.0/24)
Node B: edge router #2 (10.48.2.0/24)
Node C: VMS with Debian 12, docker containers and firewalld (ex. 172....
- 13
0
votes
2
answers
380
views
How to Block File Manager Application from Connecting to SFTP Server
Operating System : CentOS Linux 7 (Core)
File Manager : Thunar 1.6.16
Trying to achieve : Users should not copy files to other servers via SFTP. But the blocking mechanism should not block users ...
- 585
1
vote
1
answer
1k
views
Firewalld forwarding whole subnet
I have a network that looks like this:
MyPC:
eth0 10.208.65.80/18
Machine A (Linux, Running a WebServer)
eth0 10.208.65.101/18
eth1 192.168.2.1/24
firwalld zones:
sudo firewall-cmd --list-all-zones
...
- 113
1
vote
1
answer
2k
views
How does firewalld "ingress" and "egress" work compared to the 'classic' way of masquerading IPs?
I'm currently on the second iteration of a home router I built myself.
On the 'original' build, I essentially wrapped the 'standard' commands in firewalld rich rules
On V1
firewall-cmd --direct --add-...
- 135k
1
vote
0
answers
997
views
How can I create a firewalld rule that allow SSH connection only from a specific IP address?
I am not a system engineer or a network expert (I am more a software developer) and I have the following problem that I have to solve related IPTABLES firewall.
I have n Linux machines that must ...
- 7,401
1
vote
0
answers
561
views
Stuck on converting firewalld direct rule syntax to rich rule syntax
I've been googling around to try to translate an iptables script I use for some wireguard rules into native firewalld rules, since all the docs I've been reading about iptables indicate that:
...
- 21
2
votes
0
answers
69
views
firewalld Zone "trusted" Drops about 15% of Frames that are Passed by Zone "public"
Background
I have two lab machines, which I'll refer to as A and B, running RHEL 8.0.
I SSH into A and B from my Windows desktop over a 1 GbE link, whose network interface I'll refer to as eth0.
A and ...
- 1,149
0
votes
1
answer
2k
views
Adding a firewalld service closes the required port instead of opening it
I have a fresh install of Rocky Linux 9 on a Linode Shared CPU instance. I just installed firewalld to get it setup. By default it has the http and ssh services enabled.
Doing an nmap scan at this ...
