Firewalld

From Piszczynski
Revision as of 16:53, 4 February 2026 by Aleks (talk | contribs) (Created page with "== Edit firewalld service on redhat linux == Check service:<syntaxhighlight lang="bash"> sudo firewall-cmd --state # check service state systemctl status firewalld # check service is running </syntaxhighlight>Check Firewall rules:<syntaxhighlight lang="bash"> sudo firewall-cmd --get-active-zones # list active zones sudo firewall-cmd --list-all # list firewall rules sudo firewall-cmd --list-ports # list only open ports sudo firewall-cmd --list-services # list allowed...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Edit firewalld service on redhat linux

Check service:

sudo firewall-cmd --state # check service state

systemctl status firewalld # check service is running

Check Firewall rules:

sudo firewall-cmd --get-active-zones # list active zones

sudo firewall-cmd --list-all # list firewall rules

sudo firewall-cmd --list-ports # list only open ports

sudo firewall-cmd --list-services # list allowed services

Add port to allow on firewall:

sudo firewall-cmd --add-port=<port number>/tcp # add port


sudo firewall-cmd --add-port=<port number>/tcp --permanent # add port permenatly
sudo firewall-cmd --reload # reload service to apply change

Add firewall rules as services: Check service files:

cat /etc/firewalld/services/<servicename>.xml # check service file

nano /etc/firewalld/services/<servicename>.xml # create new service file

#example xml defining the service
<service>
  <short>Service Name</short>
  <description>Description of the service</description>
  <port protocol="tcp" port="<port numbers>"/>
</service>

firewall-cmd --reload # reload so firewalld can see the service

firewall-cmd --zone=public --add-service=<service name> --permanent # apply the service to the "public zone"

firewall-cmd --reload # reload to apply the change

firewall-cmd --zone=public --list-services # check active services to confirm change