0

Context: I have firewalld running on an AWS EC2.

Goal: I want to add a rich rule to the default zone (public) that allows traffic from a certain CIDR range/IP address range/subnet over port 443 (HTTPS) via the TCP protocol. I'm adding this rule to the public zone via firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" source address="[CENSORED]" port port=443 protocol=tcp accept'

Question: Once I add this rich rule will it still apply (allow traffic through) even if the services listed when I run firewall-cmd --zone=public --list-all only include ssh dhcpv6-client?

Prithvi Boinpally
  • 103
  • 4

1 Answers1

0

After testing on the target servers, yes, firewalld rich-rules apply irrespective of zone level service (and other configs for that matter).

Prithvi Boinpally
  • 103
  • 4