Skip to main content

Fedora firewall

info

Nice docs :)
https://docs.fedoraproject.org/en-US/quick-docs/firewalld/#_controlling_ports_using_firewalld

Init & Status​

# Start service
sudo systemctl start firewalld
sudo systemctl enable firewalld

After that, it should drop all incoming connections.

sudo firewall-cmd --list-all
#public (default, active)
#  target: default
#  ingress-priority: 0
#  egress-priority: 0
#  icmp-block-inversion: no
#  interfaces: eth0
#  sources:
#  services: dhcpv6-client mdns ssh
#  ports:
#  protocols:
#  forward: yes
#  masquerade: no
#  forward-ports:
#  source-ports:
#  icmp-blocks:
#  rich rules:
sudo systemctl status firewalld
sudo firewall-cmd --state

Ports​

# List open ports
sudo firewall-cmd --list-ports

# Add rule for port
sudo firewall-cmd --add-port=8500/tcp

# Remove rule for port
sudo firewall-cmd --remove-port=8500/tcp

Persistent​

Make the new settings persistent:

sudo firewall-cmd --runtime-to-permanent