Red hat linux

Firewalld Cheat Sheet

Prabath ThalangamaComment(0)

Notes and Tips

  • To list all services firewalld is aware in an easy to read format use command firewall-cmd --get-services | tr " " "\n"
  • Default firewalld service .xml files can be found under /usr/lib/firewalld/services
  • For all commands that support the --zone= option if no zone is provided it will use the default zone.
  • To make changes persistent add the --permanent option to your commands.
  • After changes are made you must run firewall-cmd --reload for changes to be loaded.
COMMAND DESCRIPTION
firewall-cmd --get-default-zone Show default zone
firewall-cmd --set-default-zone=zone Set the default zone
firewall-cmd --get-zones List all available zones.
firewall-cmd --get-active-zones List all active zones
firewall-cmd --get-services List all services firewalld is aware of
firewall-cmd --add-source=CIDR [--zone=zone] Route all traffic coming from the IP address or network/netmask to the specified zone.
firewall-cmd --remove-source=CIDR [--zone=zone] Remove the rule routing all traffic from the zone coming from the IP address or network/netmask network.
firewall-cmd --add-interface=interface [--zone=zone] Route all traffic coming from interface to the specified zone.
firewall-cmd --change-interface=interface [--zone=zone] Associate the interface with zone instead of its current zone.
firewall-cmd --list-all [--zone=zone] List all configured interfaces, sources, services, and ports for zone.
firewall-cmd --list-all-zones Retrieve all information for all zones (interfaces, sources, ports, services).
firewall-cmd --add-service=service [--zone=zone] Allow traffic to service.
firewall-cmd --add-port=port/protocol [--zone=zone] Allow traffic to the port/protocol port.
firewall-cmd --remove-service=service [--zone=zone] Remove service from allowed list for the zone.
firewall-cmd --remove-port=port/protocol [--zone=zone] Remove the port/protocol ports from the allowed list for the zone.
firewall-cmd --reload Drop the runtime configuration and apply the persistent configuration.
Prabath Thalangama
Web : sysadmin.lkEmail : inbox [at] sysadmin.lkLinkedin : https://www.linkedin.com/in/prabathtFacebook : https://www.facebook.com/prabath.hinoize

Related Articles
MySQL Red hat linux

Password Validation Plugin in MySQL

Prabath Thalangama

The validate_password plugin serves to test passwords and improve security. The plugin exposes a set of system variables that enable you to define password policy. First check the plugin directory of MySQL. mysql> show variables like “plugin%”; +—————+————————–+ | Variable_name | Value | +—————+————————–+ | plugin_dir | /usr/lib64/mysql/plugin/ | +—————+————————–+ 1 row in set (0.00 […]
Red hat linux

Gitlab reset Password for root

Prabath Thalangama

You will need to do the following: SSH into your Droplet where GitLab is installed. ssh [your-user]@[your-droplet-ip-address] Open the GitLab Rails console. If you installed GitLab via the Omnibus package, you can open the Rails console with: sudo gitlab-rails console Locate the root user and change the password. Once in the console, enter the following commands: user = […]
Red hat linux

How to remove powered by phplist

Prabath Thalangama

If that’s what you want to do, the following hack will do it (it looks like a cleaner solution would require figuring out where the [SIGNATURE] in the email template is coming from and removing that). These instructions are for phplist version 2.10.2. Search lists/admin/sendemaillib.php for $text[“signature”] = “\n\n–\nPowered by PHPlist, www.phplist.com –\n\n”; Immediately after that line, add the line (or replace […]

Leave a Reply

Your email address will not be published. Required fields are marked *