CentOS 7.x Basic firewalld configuration
From Notes_Wiki
<yambe:breadcrumb>CentOS_7.x_firewalld|CentOS 7.x firewalld</yambe:breadcrumb>
CentOS 7.x Basic firewalld configuration
To configure basic protection via firewalld use:
- Add 'ZONE=public' in appropriate ifcfg interface file under '/etc/sysconfig/network-scripts' folder
- Use following for new zone settings to take effect
- systemctl restart network
- systemctl restart firewalld
- systemctl enable firewalld
- Use following to validate that default zone is public
- firewall-cmd --get-default-zone
- Use following syntax to allow certain ports from outside
- firewall-cmd --zone=public --add-port=25/tcp --permanent
- firewall-cmd --zone=public --add-port=80/tcp --permanent
- firewall-cmd --zone=public --add-port=443/tcp --permanent
- Reload firewalld using
- firewall-cmd --reload
- Check public zone rules using
- firewall-cmd --zone=public --list-all
<yambe:breadcrumb>CentOS_7.x_firewalld|CentOS 7.x firewalld</yambe:breadcrumb>