معمل 23.1: Configure firewalld zones and services

هذا الجزء لم يُترجم بعد. أنت ترى النص الإنجليزي.

الهدف

Open web services on server1, limit a database port to one network, block one host, and test from server2.

Show the default zone, the active zones and everything open in the default zone.
Open the services http and https permanently.
Open port 5432/tcp only for the network 192.168.122.0/24 (rich rule).
Drop all traffic from the address 192.168.122.99.
Remove the service cockpit from the default zone.
Test from server2 that HTTP works and that a closed port is refused.

#firewall-cmd --list-all
#firewall-cmd --list-rich-rules
$curl -I http://server1
$nc -zv server1 3306

اعرض التلميحات

اعرض الحل

Look around.

#firewall-cmd --get-default-zone; firewall-cmd --get-active-zones; firewall-cmd --list-all

Web services.

#firewall-cmd --add-service={http,https} --permanent

Database port for one network.

#firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.122.0/24" port port="5432" protocol="tcp" accept'

Block one host.

#firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.122.99" drop'

Remove cockpit and reload.

#firewall-cmd --remove-service=cockpit --permanent
#firewall-cmd --reload

Test from server2.

$curl -I http://server1
$nc -zv server1 3306