Questions tagged [firewalld]

Questions regarding firewalld a firewall service daemon

Firewalld is a service daemon with D-Bus interface

Firewalld provides a dynamically managed firewall with support for network/firewall zones that define the trust level of network connections or interfaces.

Site: http://www.firewalld.org/

140 questions
1
vote
0 answers

Firewalld seems to be blocking connecting to my CouchDB 2.0

I'm trying to set up a CouchDB 2.0 instance up on my CentOS 7 server. I've got it installed and running as a systemd service and it responses with its friendly hello world message when I access it from the server using 127.0.0.1 or 0.0.0.0 $ curl…
WebSnake
  • 62
  • 8
1
vote
2 answers

firewalld, removing custom created service / linux

I'm adding the new custom service by command firewall-cmd --permanent --new-service=ssh2 but can't find how to remove it ...
Zaza
  • 458
  • 2
  • 7
  • 15
1
vote
0 answers

telnet: connect to address HostB: Connection refused

I looked through the previous posts and didn't find an answer to my problem. Hope you don't mind helping! Issue: When attempting to telnet from one host to another on port 8080, I am getting "telnet: connect to address HostB: Connection refused". On…
jdoss
  • 11
  • 1
  • 2
1
vote
1 answer

dbus_to_python() takes exactly 1 argument?

I'm attempting to control firewalld via the Python dbus module. I'd like to add an ip address to the trusted zone for both my current runtime as well as my permanent configuration. Here's the documentation for firewalld's dbus…
ArtOfWarfare
  • 20,617
  • 19
  • 137
  • 193
0
votes
0 answers

configure firewalld to allow trafic from docker0 to enp7s0

I am using an AlmaLinux and using firewalld as the firewall in my server. But I am unable to access other services which are bound by another network interface (enp7s0). by the way I am able access internet within the docker (thanks to this…
Lakshan Dissanayake
  • 521
  • 1
  • 4
  • 18
0
votes
0 answers

FirewallD - forward-port and rate limit within one zone

I am trying to create a zone in which I forward 3 ports to one other and at the same time need to apply a rate limit. The obvious would probably be rich rules, but they do not allow port-forward AND an action. I have tried to combine forward-ports…
netbird
  • 53
  • 1
  • 5
0
votes
0 answers

firewalld throws an error when using nftables backend

I'm adding firewalld 1.2.0 into my yocto distro. However, whenever I try to start it with debug messages (after removing the ipv6 rules), I get: 2023-05-24 12:40:54 DEBUG2: : /usr/sbin/iptables-restore…
Paiusco
  • 305
  • 1
  • 14
0
votes
1 answer

Unable to forward traffic to (rootless) podman container with firewalld

I have a rootless podman container bound to 127.0.0.1:10080, and I would like to forward external traffic to port 80 to go to that container, which I have been unable to accomplish: [me@certvault ~]$ curl -sS http://127.0.0.1:10080…
Torque
  • 3,319
  • 2
  • 27
  • 39
0
votes
0 answers

Is there any CentOS8 firewall rule automatically applied when using Kubernetes deployed on bare metal?

I built a simple setup of Kubernetes on bare metal. With 1 master and 2 worker nodes: [root@kubemaster helm-chart]$ kubectl get nodes NAME STATUS ROLES AGE VERSION kubemaster Ready control-plane 53d v1.26.1 kubenode-1 …
bkk
  • 307
  • 5
  • 22
0
votes
0 answers

Keepalived split brain issue

I have issue with keepalived on Oracle Linux 8. The VIP is assigned to both nodes and both nodes are in MASTER mode. **My keepalived configuration is: ** Node 1 cat /etc/keepalived/keepalived.conf global_defs { vrrp_priority -20 checker_priority…
zerozg
  • 1
0
votes
1 answer

Configuring firewalld (Rocky linux 9)

After much pain I managed to configure firewalld so that I only allow specific services to given IP-numbers. Now I want to give access to all IPs to https/447. But I don't know how to do that. My current configuration is listed below. # firewall-cmd…
Andreas
  • 27
  • 4
0
votes
0 answers

how to apply firewalld rich rule to a particular user group?

I am trying to apply rich rule on a particular group, i am not sure if you can do that and already tried hitting stuff. I am pretty sure you can directly apply it through command which is not recommended and takes alot of time and make it complex.…
0
votes
0 answers

firewalld blocks libvirt zone and guest vm accessing host lan in default network with nat forwarding

I am testing libvirt/qemu/kvm based linux guest vm on an arch linux pc where firewalld is running. The simple linux guest is using default libvirt network with nat forwarding. According libvirt documentation the guest should be able to access host…
benibilme
  • 77
  • 1
  • 6
0
votes
1 answer

Why does firewalld in combination with Docker not allow https connections

I don't have much Linux experience but I have run into a problem with firewalld. My friend and I recently used certbot to get our ssl certificate for a Linode box. The plan is for nginx to serve a NEXTJS application on subdomain.domain.com and a…
TubaControl
  • 11
  • 1
  • 2
0
votes
0 answers

Virtual machine in KVM failing to connect http server running on the same vm network when firewall is stopped on KVM host

I am running a multiple VMs in kvm configured on Fedora37. Ip provided to the VMs by a dhcp server running on the same kvm network. I cannot reach http service running on the on the same dhcp server if firewall is up on KVM host. On the other hand,…
chanchal
  • 27
  • 1
  • 7