Skill 2 in course 2.4: Network and Security

Firewalld

Allow and block traffic with zones, services, ports, sources and rich rules, and keep the rules after a reboot.

Intermediate2 lessons10 exercises1 h 35 min
Start skill

You will be able to

  • Explain zones, services and the difference between runtime and permanent rules.
  • Open and close services and ports in a zone, and move interfaces and sources between zones.
  • Write rich rules that allow, reject or log traffic from a given address, and forward a port.
  • Test the firewall from another host and diagnose a service that is running but unreachable.

Lessons

  1. 01Zones, services and portsUnderstand firewalld's model, open a service or port, and make the change permanent without breaking your own access.firewall-cmd--add-service--add-port--permanent--reload--runtime-to-permanent0/5 exercises
  2. 02Sources, rich rules and port forwardingAllow or block traffic by the address it comes from, write rich rules with logging and rate limits, and forward one port to another.--add-source--add-rich-rule--list-rich-rules--remove-rich-rule--add-forward-portlog prefix0/5 exercises