CentOS 7.x Basic firewalld configuration
From Notes_Wiki
Home > CentOS > CentOS 7.x > System Administration > Firewalld > CentOS 7.x Basic firewalld configuration
To configure basic protection via firewalld use:
- Install firewalld if not present:
- yum -y install firewalld
- Add 'ZONE=public' in appropriate ifcfg interface file under '/etc/sysconfig/network-scripts' folder
- Use following for new zone settings to take effect
- systemctl restart network
- systemctl restart firewalld
- systemctl enable firewalld
- Use following to validate that default zone is public
- firewall-cmd --get-default-zone
- Use following syntax to allow certain ports from outside
- firewall-cmd --zone=public --add-port=25/tcp --permanent
- firewall-cmd --zone=public --add-port=80/tcp --permanent
- firewall-cmd --zone=public --add-port=443/tcp --permanent
- Reload firewalld using
- firewall-cmd --reload
- Check public zone rules using
- firewall-cmd --zone=public --list-all
Home > CentOS > CentOS 7.x > System Administration > Firewalld > CentOS 7.x Basic firewalld configuration