firewalld-users July 2022

firewalld-users@lists.fedorahosted.org

3 participants
2 discussions

rich-rules
by Samuel Irlapati 25 Jul '22

25 Jul '22

I have been using direct-rules. I just upgraded to fedora 36 and looks like I can't use direct-rules anymore. Is this true? Also from some google searches, I have come to understand that direct-rules can be replaced with rich-rules. Is this true? I have a lot of rules that need to be converted, so will be asking for help for them. So I will just start by asking some simple ones. How do I convert the following rule to a rich-rule? firewall-cmd --direct --add-rule ipv4 mangle PREROUTING 0 -p tcp -s $WEBSAFETY0_PODIP --dport 80 -j MARK --set-mark $WEBMARK Does it matter which zone "$WEBSAFETY0_PODIP" is located in, if the $WEBMARK uses a routing table that posroutes the packet onto an interface on the external zone? Sam

2 1

firewalld's default ruleset - no 'policy drop'
by Gareth Evans 11 Jul '22

11 Jul '22

Hello, Comparing the default nft rulesets of firewalld and ufw (on Debian 11), I note that ufw provides a qualified 'policy drop' for input, but firewalld does not. Isn't this less secure, and shouldn't it? With thanks, Gareth

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users July 2022