Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Firewalldhttps://www.youtube.com/watch?v=T2g6nxRCnLQ&ab_channel=NetSecProf

firewall-cmd --list-all  (default zone= public )
Start and stop deamon

[root@sn9120210070 ~]# firewall-cmd --state
running

sudo systemctl stop status firewalld.service

sudo systemctl start firewalld.service

disable the firewalldsudo systemctl stop firewalld.service
Services
list all services availablefirewall-cmd --get-services
add service to a zone

firewall-cmd --add-service=https    ( will add to the default zone= public or "untrusted" or what ever default zone)

firewall-cmd --reload

list all ICMP type
firewall-cmd --get-icmptypes

https://superuser.com/questions/1114065/getting-firewalld-to-allow-ping-requests
allow ICMP
( by default block, inversion=allow ;-)
firewall-cmd --permanent --add-icmp-block-inversion
firewall-cmd --permanent --add-icmp-block=echo-reply
firewall-cmd --permanent --add-icmp-block=echo-request
firewall-cmd --reload
traceroute
firewall-cmd --permanent --add-icmp-block=time-exceeded
firewall-cmd --permanent --add-icmp-block=port-unreachable
firewall-cmd --reload
add permanent servicefirewall-cmd --add-service-https  --permanent
create service


Ports
add portfirewall-cmd --get-ports
add permanent port


Zones
list zonesfirewall-cmd --get-zones
zones config infofirewall-cmd --zone=home --list-all
add zones
create zone


NAT or masquarade




...