Questions tagged [firewalld]

Questions regarding firewalld a firewall service daemon

Firewalld is a service daemon with D-Bus interface

Firewalld provides a dynamically managed firewall with support for network/firewall zones that define the trust level of network connections or interfaces.

Site: http://www.firewalld.org/

140 questions
0
votes
0 answers

Linux firewalld discards local UDP packet although ACCEPT rule is hit

On a RHEL8 system, I'm receiving UDP packet for destination port 2152 (gtp-user) from an external interface and they are not reaching the application listening on the UDP socket opened for that port. I see packets reaching the application fine if I…
0
votes
0 answers

More info on Zones in Firewalld

I want to know more about how firewalld zones work, like, can I say if my ip is 192.168.153.12 then it belongs to home zone. How does it distinguish between zones? Is there any way(command) to at least view the iptable(old school) equivalent? I have…
D J
  • 163
  • 7
0
votes
2 answers

Firewalld how to allow connections on a port to all ips?

I'm trying to configure firewalld on my VPS server and I'm trying to open a port for my postgresql server. So far, I have done the following: sudo firewall-cmd --new-zone=postgresqlrule --permanent sudo firewall-cmd --reload sudo firewall-cmd…
joepaji
  • 45
  • 4
0
votes
0 answers

Docker warm with nginx proxy pass and firewalld

I have a Docker swarm network with one server acting as a load balancer running nginx in a container. This container uses nginx proxy pass to forward requests to other internal servers on an interface that’s private and uses specific ports So for…
noname
  • 153
  • 2
  • 12
0
votes
1 answer

Running firewalld in a docker container

I am struggling installing filemaker server inside docker 20.10.18 container, it seems to be failing to setup firewalld: ERROR:dbus.proxies:Introspect error on :1.9:/org/fedoraproject/FirewallD1/config: dbus.exceptions.DBusException:…
Fleeploed
  • 23
  • 4
0
votes
1 answer

How to secure a Galera Node using Firewalld?

I'm having trouble securing the nodes in my Galera cluster. I was just opening up the required ports on each node and the cluster worked fine. I now want to restrict access further so only the other nodes are allowed to communicate with the node, I…
0
votes
1 answer

How to set default service port/protocol with firewalld module using Ansible?

I'm looking for a method to set default port/protocol in my Ansible task. # Add port in firewalld - name: Open port in firewalld firewalld: port: "{{ foo_setted_port_var | default (8080/tcp) }}" state: enabled permanent: yes …
Alexandre
  • 1
  • 1
0
votes
1 answer

Can not reach open ports on Oracle Cloud Instance

I have 2 micro instances running in Oracle Cloud, both under the same subnet with some port forwarding enabled, namely On the first instance I enabled also these ports in firewalld and I'm able to reach them from outside. ubuntu@instance:~$ sudo…
Droid
  • 441
  • 1
  • 3
  • 18
0
votes
1 answer

How to block all traffic on a VM except host IP?

I am running a Vagrant VM and am trying to have a network isolated mode. Since disabling or changing anything with the default NAT interface breaks Vagrant I decided to block ALL traffic inside the CentOS 7 VM except the host IP. Let's make 1.1.1.1…
Fyrie
  • 1
  • 1
0
votes
1 answer

I can't access the internet inside the pods of rancher running in centos

I'm running rancher in centos with the master node being the same machine. I can do everything but when i try to "apt-get update" inside the pods i get: Err:1 http://archive.ubuntu.com/ubuntu focal InRelease Temporary failure…
0
votes
1 answer

Is there a way to communicate rest api's that are launched using containers?

I've been trying to send an http post request to a container on the same network but the host refused to connect. Here are the results that I got after debugging: The containers can ping each other. I can access both of the containers using REST…
0
votes
1 answer

Fedora 35 firewalld add port and service problem

Hello i just installeed Fedora and I'm trying to open the port 20190 I do everything just as normal but when i use firewall-cmd --list-all to see if the port is opened, i see nothing !!! This is what i do to open the port firewall-cmd --zone=public…
HelloMachine
  • 355
  • 2
  • 8
0
votes
0 answers

OK to run systemctl before firewall-cmd, or vice-versa?

Here's an example of the code I use to start my NTP service on CentOS 7.9: import pexpect from getpass import getpass commands = ["sudo systemctl start ntpd", "sudo firewall-cmd --zone=public --add-port=123/udp", "sudo…
Rob G
  • 673
  • 3
  • 10
0
votes
1 answer

Fail2ban with EPEL package fail2ban-firewalld on Linux RedHat 8; ip is in jail but firewalld does not block it

I'm trying to use fail2ban with firewalld on Linux RedHat 8 and have not been able to get the default configuration to work. I am trying to ban ip addresses after a failed login attempt. The web server is running a Meteor 2.5.1 app via Phusion…
Little Brain
  • 2,647
  • 1
  • 30
  • 54
0
votes
1 answer

ansible.posix.firewalld fails with Polkit error

This is probably an easy fix, but I'm not finding anything with my google-fu. Maybe pulling the wrong part of the error... Anyway, trying to just set a simple firewalld rule for inbound http. This looks like some sort of permissions issue with the…