Stack Overflow
Stack Overflow

Questions tagged [firewalld]

Questions regarding firewalld a firewall service daemon

Firewalld is a service daemon with D-Bus interface

Firewalld provides a dynamically managed firewall with support for network/firewall zones that define the trust level of network connections or interfaces.

Site: http://www.firewalld.org/

140 questions
1
vote
1 answer

Using newly added firewall service in rpm spec script fails

I have a rpm package that adds a new firewall service and during install wants to enable this service. However this fails with "Error: INVALID_SERVICE": $ dnf localinstall -y firewall-spec-test-0.0.1-1.fc35.x86_64.rpm Last metadata expiration check:…
hlovdal
  • 26,565
  • 10
  • 94
  • 165
1
vote
0 answers

docker ports filtered by firewalld

I'm on CentOS 7.9 and I need to get dockers to work with a firewalld configured. However, the port is always filtered when firewalld is started... Unless I tried to connect to it over localhost. On this machine (myhost), I have a running container…
ouzmoutous
  • 111
  • 3
1
vote
0 answers

Can I specify both source port and (target) port in one firewalld rich rule?

I want to add a rich rule to allow access to a target port from specific source port, I tried to add the rule like this: firewall-cmd --add-rich-rule='rule family="ipv4" source address="192.168.1.x" source-port port="1234" protocol="tcp" port…
Adun ton
  • 11
  • 2
1
vote
1 answer

firewalld port forward to k8s node port not working

I want to configure port forward 80->32181, 443->30598. 32181 and 30598 is NodePort of k8s ingress controller which i can establish connection correctly: $ curl http://localhost:32181 404 Not Found ... $…
Vista Chyi
  • 75
  • 7
1
vote
2 answers

kubernetes ingress 502 bad gateway

I installed a Kubernetes Cluster on bare metal (using VMware virtual machines) with the following nodes master-01 Ready control-plane,master 5d3h v1.21.3 master-02 Ready control-plane,master 5d3h v1.21.3 master-03 Ready …
tba
  • 101
  • 2
  • 11
1
vote
3 answers

Exposed ports from docker container cannot able to access on host server by IP Address in RedHat 8

I am running docker container in RedHat 8. In my docker container, I exposed port 8080 for accessible from outside. I can able to telnet 8080 from other servers but I cannot able to telnet 8080 from host server by IP address. [root@redhat1 biz]# cat…
Kyaw Min Thu L
  • 537
  • 8
  • 26
1
vote
1 answer

Firewalld: Adding a source to multiple zones, gives Error: ZONE_CONFLICT .. Is there another way?

I've come up with a role based design for provisioning my firewalld zones with Saltstack. Practically speaking I'm using zones more as logical groups. For instance, all servers in a certain group are allowed to access the Grafana/Influx server (for…
GerardJP
  • 985
  • 2
  • 9
  • 20
1
vote
1 answer

Server always return "404 page not found" and "Client sent an HTTP request to an HTTPS server." errors

I migrated my server OS from CentOS 7 to CentOS 8 stream recently with standard installation options. Now I'm facing an error on the HTTP/S server accessing. Assuming you are running a http server on port 80 or 443. For example using python module…
tsumina
  • 11
  • 3
1
vote
0 answers

Using firewalld rich rules to drop loopback packets with specific source and destination ports

I am running several software components communicating with each other through different ports on a single machine. one of them is a kernel module. I want to simulate network disconnections between them. can I use firewalld with rich rules to drop…
Or Grinberg
  • 26
  • 5
1
vote
3 answers

I cannot connect after enable Firewalld on CentOS7

I'm trying to setup LAMP to CentOS7 with a guide. I tried to run these commands to allow HTTP and HTTPS traffic: sudo firewall-cmd --permanent --zone=public --add-service=http sudo firewall-cmd --permanent --zone=public --add-service=https sudo…
tatoline
  • 423
  • 6
  • 11
1
vote
0 answers

Using firewalld in CentOS 8 to dynamically auto-populate a blacklist and block it

coming from a FreeBSD and PF background, I know there's a simple rule in PF which will dynamically add an IP address to a blacklist if it exceeds a certain threshold and then blocks them. Using a CentOS 8.2 and firewalld, I am able to find…
Blue Aquan
  • 11
  • 2
1
vote
1 answer

Ansible loop list in dictionary and retain the key

I'm trying to create a series of firewalld rules using a variable imported from a yaml file. The yaml file creates a dictionary of service names and the associated ports are a list within each item. A segment of the yaml looks like…
Steve Crook
  • 1,013
  • 2
  • 13
  • 22
1
vote
1 answer

Use Ansible to remove firewalld rich rule

I'm trying to remove a firewalld rich rule by adding the absent state however I'm getting the error "absent and present state can only be used in zone level operations". I've specified the public zone in the task so I'm not sure how absent should be…
MattB
  • 135
  • 1
  • 3
  • 10
1
vote
0 answers

How do I do a SNAT in firewalld

I'me trying to do the equivalent of iptables -t nat -I POSTROUTING -p all -s 172.17.0.0/16 -j SNAT --to-source 5.6.7.8 in firewalld to allow docker to bind to the secondary IP on my NIC. The closest I can work out it firewall-cmd --permanent…
Ben Edwards
  • 425
  • 5
  • 18
1 2
3
…
9 10