firewalld-users March 2018

firewalld-users@lists.fedorahosted.org

1 participants
2 discussions

Firewalld & IPv6
by Paavo Leinonen 04 Jun '18

04 Jun '18

Hi, I'm running firewalld in a router that connects the devices in my home LAN to internet. I have recently added IPv6 DHCPv6 config to the router, and prefix delegation works, so the devices in my home LAN get proper IPv6 addresses. However, I don't like the idea that all IPv6 enabled devices in my home LAN have public IPv6 addresses. I'd very much prefer simple IPv4 -style NAT approach to protect the devices in home LAN from being accessed from the internet. How do I implement something like this with firewalld in the router? wanif=eth0 lanif=eth1 ip6tables -A FORWARD -m state --state NEW -i $lanif -o $wanif -j ACCEPT ip6tables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT ip6tables -P FORWARD DROP Other ways to protect the devices in my home LAN being accessed from the internet? -Paavo

2 2

Where are the connection logs (-j LOG) written?
by philippe+firewalld-users＠caltech.edu 01 Mar '18

01 Mar '18

Sorry if this has already been answered, but I haven't been able to find it. If I have a rule with a LOG argument, in what file can I see the logs of connections that match that rule? (In case it makes a difference, I'm using firewalld 0.4.4.4 on RHEL 7.) Thanks. Philippe

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users March 2018