CentOS - Mar 2017 - firewalld management on a headless server

Hi,
> I recently converted my employer's firewall from pure iptabes to
> firewalld and looked for something similar, more along the lines of
> webmin, etc.
funny,
my webmin installation on a banana-pi has webmin 1.831, which has
support for firewalld.

I am not sure, but I believe I got it directly from www.webmin.com.

best regards
---
Michael Schumacher

Nice catch, Mr. Schumacher --->  The following modules are included as
standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz
Configure a Linux firewall using FirewallD, by editing allowed
services and ports.

This is likely the right tool for the job.

On Mon, Mar 27, 2017 at 5:00 PM, Michael Schumacher
<michael.schumacher at pamas.de> wrote:
> Hi,
>
>> I recently converted my employer's firewall from pure iptabes to
>> firewalld and looked for something similar, more along the lines of
>> webmin, etc.
>
> funny,
> my webmin installation on a banana-pi has webmin 1.831, which has
> support for firewalld.
>
> I am not sure, but I believe I got it directly from www.webmin.com.
>
> best regards
> ---
> Michael Schumacher
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos

yum (CentOS/RedHat/Fedora)

By adding the Webmin repository and Jamie Cameron's key, it is
possible to install & maintain the latest Webmin/Usermin versions.

The following will install the latest Webmin version by adding the
webmin-repo and corresponding GPG key. Yum will resolve all the
necessary dependancies.

Just Cut&Paste the entire text below and hit enter/return:

(echo "[Webmin]
name=Webmin Distribution Neutral
baseurl=http://download.webmin.com/download/yum
enabled=1
gpgcheck=1
gpgkey=http://www.webmin.com/jcameron-key.asc"
>/etc/yum.repos.d/webmin.repo;
yum -y install webmin)

Mike wrote:
> Nice catch, Mr. Schumacher --->  The following modules are included as
> standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz
> Configure a Linux firewall using FirewallD, by editing allowed
> services and ports.
>
> This is likely the right tool for the job.
>
Webmin used to be considered insecure, and people would scream and yell if
you suggested using it. Has that changed?

      mark

Webmin used to be considered insecure, and people would scream and yell if
you suggested using it. Has that changed?

      mark


Ahh, I did not know of this.
Well, I'm back to suggesting OP take a little time and get comfortable with
firewall-cmd in the terminal. If we want our solid redhat clone then
systemd, NetworkManager, and firewalld are soldered into the foreseeable
future.

On 03/27/2017 09:23 PM, Mike wrote:
> Webmin used to be considered insecure, and people would scream and yell if
> you suggested using it. Has that changed?
>
>        mark
>
>
> Ahh, I did not know of this.
> Well, I'm back to suggesting OP take a little time and get comfortable
with
> firewall-cmd in the terminal. If we want our solid redhat clone then
> systemd, NetworkManager, and firewalld are soldered into the foreseeable
> future.
>
I am a bit familiar with firewall-cmd, but need to learn more.  But I am 
looking out to other functions and management.  I am looking at 
multi-function devices and such.  So I would like something beyond cli 
for the interface.

Wild thought.  a php-firewall package with the policy in MariaDB  :)

Then I can tie it into RESTCOMF and I2NSF.  Got to talk to some people 
here at IETF tomorrow...

But I will look again at webmin.  Use to use it a lot.