Firewall
From Leo's Notes
Last edited on 16 May 2023, at 20:49.
Linux
Linux typically uses IPTables for its firewall. On most modern Linux distributions, IPTables is controlled through another program or manager such as firewalld, or CSF.
Firewalld
See whether firewalld is running | firewall-cmd --state |
List all rules | firewall-cmd --list-all |
List all zones | firewall-cmd --list-all-zones |
List all rules in a specific zone | firewall-cmd --list-all --zone=home |
Allow a specific port | firewall-cmd --add-port <port-number/port-type> --permanent |
Reload the firewall | firewall-cmd --reload |
Opening a Port
To allow a specific port access to your machine, you will (most likely) need to make IPTables ACCEPT
traffic meeting the port criteria on the INPUT
chain.
Simple IPTables:
# iptables -A INPUT -p tcp --dport 80 -j ACCEPT
If using Red Hat's firewalld:
# firewall-cmd --permanent --add-port=80/tcp
# firewall-cmd --permanent --add-service=x
## Reload firewall rules
# firewall-cmd --reload
CSF
If using CSF:
# vi /etc/csf/csf.conf
## Edit 'TCP_IN' to include any TCP traffic IN, or TCP_OUT for traffic out.
## Reload CSF
# csf -r