Firewall

Question 1

How do you list firewall zones?

Answer 1

firewall-cmd –get-zones

Question 2

How do you get the default zone?

Answer 2

firewall-cmd –get-default-zone

Question 3

How do you assign an IP range to a firewall zone?

Answer 3

firewall-cmd –zone= –add-source=<192.168.0.0/24>

Question 4

What is the difference between a run level vs persistent change?

Answer 4

A run level change does not require firewall-cmd –reload

A persistent change –permanent requires service to be reloaded

Question 5

Why is a firewall zone useful?

Answer 5

You can group multiple ip ranges (sources) into a zone and apply rules efficiently

Question 6

How do you list firewall rules for a zone?

Answer 6

firewall-cmd –zone= –list-all

Question 7

How would you add a firewall to accept http on the home zone?

Answer 7

firewall-cmd –zone=home –add-port=80/tcp

firewall-cmd –zone=home –add-service=http

Question 8

How do you make firewalld block everything with only system access via local console?

Answer 8

firewall-cmd –panic-on

firewall-cmd –query-panic *get status