The Wiert Corner – irregular stream of stuff

Last week I posted firewalld: show interfaces with their zone details and show zones in use as a follow up on On my research list: migrate from OpenSuSE SuSEfirewall2 to firewalld « The Wiert Corner – irregular stream of stuff.

I explained that firewalld is based on zones, and showed some statements on how to retrieve information.

In the mean time, I collected a bunch more firewalld related links, so here they are:

• [WayBack] How To Set Up a Firewall Using FirewallD on CentOS 7 | DigitalOcean (which I found quite late in the game) is one of the easiest to read and understand guides for firewalld which works equally wel for any distribution, including OpenSuSE.
• [WayBack] Firewalld – openSUSE Wiki covering:
  

  1. Features
  2. Documentation
  3. RPM Packaging
  4. Migration from SuSEfirewall2
  5. Troubleshooting
     • Firewalld module doesn’t start after Tumbleweed Upgrade
  6. See also
  7. External links

• [WayBack] TUMBLEWEED can anyone provide a clear overview of the move to firewalld? explaining some issues when migrating from SuSEfirewall2 to firewalld
• [WayBack] susefirewall2-to-firewalld/susefirewall2-to-firewalld at master · openSUSE/susefirewall2-to-firewalld · GitHub
• [WayBack] Masquerading and Firewalls | Security Guide | openSUSE Leap 15.1 covering
  

  1. Packet Filtering with iptables
  2. Masquerading Basics
  3. Firewalling Basics
  4. firewalld
  5. For More Information

• [WayBack] GitHub – openSUSE/susefirewall2-to-firewalld: Basic SuSEfirewall2 to FirewallD migration script
• [WayBack] TUMBLEWEED Opening ports in the new YaST2 Firewall explaining you should favour adding services over ports, but you can add ports nonetheless:
  

   For adding ports numerically, just add one at a time, or a range eg ‘3000-4000’

  The CLI command to allow port 5000 TCP would be

  sudo firewall-cmd --zone=public --add-port=5000/tcp

• [WayBack] 5 Useful Examples of firewall-cmd command – The Geek Diary with the most important takeaway that you:
  • first should try a change locally
  • then make it permanent by using the --permant option

  # firewall-cmd --zone=public --add-service=http
  success

  To make changes permanent, use the –permanent option. Example:

  # firewall-cmd --permanent --zone=public --add-service=http
  success

  Changes made in Permanent configuration mode are not implemented immediately. Example:

  # firewall-cmd --zone=work --list-services
  dhcpv6-client ssh

  However, changes made in a Permanent configuration are written to configuration files. Restarting the firewalld service reads the configuration files and implements the changes.
  Example:

  # systemctl restart firewalld

  # firewall-cmd --zone=work --list-services
  dhcpv6-client http ssh

• LEAP 15 and SLES 15 were the versions that switched to firewalld from SuSEfirewall2 .
  • [WayBack] [SOLVED] SuSE LEAP 15 firewalld
    • LEAP is not an abbreviation: [WayBack] Portal:Leap – openSUSE Wiki
  • [WayBack] How to enable or disable firewall in SLES 15 – Init Pals
    • SLES (though some use SLE) is an abbrviation for SUSE Linux Enterprise Server.
• [WayBack] Documentation – Manual Pages – firewall-cmd | firewalld – the most important man page.
• [WayBack] Documentation – Zone – Examples | firewalld
• [WayBack] Documentation | firewalld linking to
  

  1. Concepts
  2. Configuration
     1. Directories
     2. Runtime versus Permanent
     3. firewalld.conf
  3. Utilities
     1. firewall-cmd
     2. firewall-offline-cmd
     3. firewall-config
     4. firewall-applet
  4. The daemon: firewalld
  5. Zone
     1. Predefined Zones
     2. Connections, Interfaces and Sources
     3. Configuration of Zones
     4. Default Zone
     5. Use of Zones
     6. Options
     7. Examples
  6. Service
     1. Options
     2. Examples
  7. IPSet
     1. Options
     2. Examples
  8. Helper
     1. Options
     2. Examples
  9. ICMP Type
     1. Options
     2. Examples
  10. Direct Interface
      1. Options
      2. Examples
  11. HowTo
      1. Enable and Disable firewalld
      2. Get firewalld State
      3. Reload firewalld
      4. Open a Port or Service
      5. Add a Service
      6. Debug firewalld
  12. Manual Pages
      1. firewalld(1)
      2. firewall-cmd(1)
      3. firewall-offline-cmd(1)
      4. firewall-config(1)
      5. firewall-applet(1)
      6. firewalld.conf(5)
      7. firewalld.zones(5)
      8. firewalld.zone(5)
      9. firewalld.service(5)
      10. firewalld.ipset(5)
      11. firewalld.helper(5)
      12. firewalld.icmptype(5)
      13. firewalld.richlanguage(5)
      14. firewalld.direct(5)
      15. firewalld.lockdown-whitelist(5)
      16. firewalld.dbus(5)
  13. External Resources
  14. Working With The Source

• a
• a
• a
• a
• a

–jeroen