mirror of
https://github.com/ivuorinen/cheatsheet-tldr.git
synced 2026-01-31 13:41:58 +00:00
38 lines
1.1 KiB
Plaintext
38 lines
1.1 KiB
Plaintext
---
|
|
syntax: markdown
|
|
tags: [tldr, linux]
|
|
source: https://github.com/tldr-pages/tldr.git
|
|
---
|
|
# firewall-cmd
|
|
|
|
> The firewalld command-line client.
|
|
> More information: <https://firewalld.org/documentation/man-pages/firewall-cmd>.
|
|
|
|
- View the available firewall zones:
|
|
|
|
`firewall-cmd --get-active-zones`
|
|
|
|
- View the rules which are currently applied:
|
|
|
|
`firewall-cmd --list-all`
|
|
|
|
- Permanently move the interface into the block zone, effectively blocking all communication:
|
|
|
|
`firewall-cmd --permanent --zone={{block}} --change-interface={{enp1s0}}`
|
|
|
|
- Permanently open the port for a service in the specified zone (like port 443 when in the `public` zone):
|
|
|
|
`firewall-cmd --permanent --zone={{public}} --add-service={{https}}`
|
|
|
|
- Permanently close the port for a service in the specified zone (like port 80 when in the `public` zone):
|
|
|
|
`firewall-cmd --permanent --zone={{public}} --remove-service={{http}}`
|
|
|
|
- Permanently open two arbitrary ports in the specified zone:
|
|
|
|
`firewall-cmd --permanent --zone={{public}} --add-port={{25565/tcp}} --add-port={{19132/udp}}`
|
|
|
|
- Reload firewalld to force rule changes to take effect:
|
|
|
|
`firewall-cmd --reload`
|