RHEL/firewalld: Difference between revisions

From Omnia
Jump to navigation Jump to search
No edit summary
 
Line 10: Line 10:
== Firewall ==
== Firewall ==


Show running status:
  systemctl status firewalld
  systemctl status firewalld
  # or
  # or
  firewall-cmd --state
  firewall-cmd --state


Show open services (and associated ports):
  firewall-cmd --get-services
  firewall-cmd --get-services
# cockpit dhcpv6-client http https ssh


Show explicit ports added:
firewall-cmd --list-ports
Open ports now (temporary):
  firewall-cmd --zone=public --add-service=http
  firewall-cmd --zone=public --add-service=http
  firewall-cmd --zone=public --add-service=https
  firewall-cmd --zone=public --add-service=https


Add specific port:
  firewall-cmd --zone=public --add-port=27000/tcp  # flexlm lmgrd service
  firewall-cmd --zone=public --add-port=27000/tcp  # flexlm lmgrd service


Line 25: Line 33:
--
--


Add to startup:
Open ports now (temporary):
firewall-cmd --zone=public --add-service=http
firewall-cmd --zone=public --add-service=https
firewall-cmd --zone=public --add-port=27000/tcp  # lmgrd
 
Add to startup script (persistent - does not alos open):
  firewall-cmd --zone=public --add-service=http --permanent
  firewall-cmd --zone=public --add-service=http --permanent
  firewall-cmd --zone=public --add-service=https --permanent
  firewall-cmd --zone=public --add-service=https --permanent
  firewall-cmd --zone=public --add-port=27000/tcp --permanent  # lmgrd
  firewall-cmd --zone=public --add-port=27000/tcp --permanent  # lmgrd



Latest revision as of 16:54, 3 August 2025

List Ports

Add Port

firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --reload

Notes

Firewall

Show running status:

systemctl status firewalld
# or
firewall-cmd --state

Show open services (and associated ports):

firewall-cmd --get-services
# cockpit dhcpv6-client http https ssh

Show explicit ports added:

firewall-cmd --list-ports

Open ports now (temporary):

firewall-cmd --zone=public --add-service=http
firewall-cmd --zone=public --add-service=https

Add specific port:

firewall-cmd --zone=public --add-port=27000/tcp  # flexlm lmgrd service

ref: [1]

--

Open ports now (temporary):

firewall-cmd --zone=public --add-service=http
firewall-cmd --zone=public --add-service=https
firewall-cmd --zone=public --add-port=27000/tcp  # lmgrd

Add to startup script (persistent - does not alos open):

firewall-cmd --zone=public --add-service=http --permanent
firewall-cmd --zone=public --add-service=https --permanent
firewall-cmd --zone=public --add-port=27000/tcp --permanent  # lmgrd

If you didn't use the --permanent, to save:

firewall-cmd --runtime-to-permanent

ref: [2]

keywords