similar to: firewalld management on a headless server

On 03/27/2017 03:24 PM, Mike wrote: > I recently converted my employer's firewall from pure iptabes to > firewalld and looked for something similar, more along the lines of > webmin, etc. > I didn't find anything close to a match. > In the end, it all came down to getting comfortable with > "firewall-cmd" in the shell. I have been digging and found that Fedora

Hi, > I recently converted my employer's firewall from pure iptabes to > firewalld and looked for something similar, more along the lines of > webmin, etc. funny, my webmin installation on a banana-pi has webmin 1.831, which has support for firewalld. I am not sure, but I believe I got it directly from www.webmin.com. best regards --- Michael Schumacher

On Mon, March 27, 2017 3:58 pm, Mike wrote: > I don't think it's going to give you a web-based firewall configuration > tool. Firewall/router system I use is pfSense: https://pfsense.org/ It has nice web interface for configuration of everything, based on FreeBSD (very slim, lightweight, small footprint). Has a lot what you may want to have in router box, including VPN,... If OP

On 03/29/2017 07:38 AM, Leon Fauster wrote: > Am 27.03.2017 um 21:03 schrieb Robert Moskowitz <rgm at htt-consult.com>: >> Is there an Apache tool to manage firewalld on a headless server? >> >> I am looking forward to my next Centos project which is to replace my Juniper SSG5 firewall... >> >> And along that line, what overlap, if any between firewalld and

I recently converted my employer's firewall from pure iptabes to firewalld and looked for something similar, more along the lines of webmin, etc. I didn't find anything close to a match. In the end, it all came down to getting comfortable with "firewall-cmd" in the shell. Haven't used suricata, so nothing to add there. On Mon, Mar 27, 2017 at 3:03 PM, Robert Moskowitz

I don't think it's going to give you a web-based firewall configuration tool. It does allow you to control/configure networking hardware and devices via NetworkManager, but I don't believe it goes further than that for networking. Ironically, it does provide a an ssh-like session terminal where you can get directly logged in and use firewall-cmd. :-)

Am 27.03.2017 um 21:03 schrieb Robert Moskowitz <rgm at htt-consult.com>: > > Is there an Apache tool to manage firewalld on a headless server? > > I am looking forward to my next Centos project which is to replace my Juniper SSG5 firewall... > > And along that line, what overlap, if any between firewalld and Suricata? We have good results with

Nice catch, Mr. Schumacher ---> The following modules are included as standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz Configure a Linux firewall using FirewallD, by editing allowed services and ports. This is likely the right tool for the job. On Mon, Mar 27, 2017 at 5:00 PM, Michael Schumacher <michael.schumacher at pamas.de> wrote: > Hi, > >> I recently

On 3/27/2017 10:20 PM, Sorin Srbu wrote: > That reminded me about Smoothwall I used to use a few years back. > Wasn't pfsense related to Smoothwall, maybe even a fork? smoothwall is linux based. m0n0wall was a BSD firewall that pfSense forked from back in 2004. -- john r pierce, recycling bits in santa cruz

I am having problems with EDNS support on a few Centos 6.3 bind servers. I am trying to determine if the problem is my Juniper SSG5 firewall of Centos. All the servers have firewall enabled, though I have tested with stopping iptables and ip6tables. I am using tests from: https://www.dns-oarc.net/oarc/services/replysizetest dig @localhost +short rs.dns-oarc.net txt gets: ;; Truncated,

Mike wrote: > Nice catch, Mr. Schumacher ---> The following modules are included as > standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz > Configure a Linux firewall using FirewallD, by editing allowed > services and ports. > > This is likely the right tool for the job. > Webmin used to be considered insecure, and people would scream and yell if you

On Mon, March 27, 2017 17:31, m.roth at 5-cent.us wrote: > Mike wrote: >> Nice catch, Mr. Schumacher ---> The following modules are included >> as >> standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz >> Configure a Linux firewall using FirewallD, by editing allowed >> services and ports. >> >> This is likely the right tool for the

James B. Byrne wrote: > > On Mon, March 27, 2017 17:31, m.roth at 5-cent.us wrote: >> Mike wrote: >>> Nice catch, Mr. Schumacher ---> The following modules are included as standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz Configure a Linux firewall using FirewallD, by editing allowed services and ports. >>> >>> This is likely the right

> -----Original Message----- > From: CentOS [mailto:centos-bounces at centos.org] On Behalf Of Valeri > Galtsev > Sent: den 27 mars 2017 23:43 > To: CentOS mailing list <centos at centos.org> > Subject: Re: [CentOS] firewalld management on a headless server > > > On Mon, March 27, 2017 3:58 pm, Mike wrote: > > I don't think it's going to give you a

On Wed, 29 Mar 2017, Robert Moskowitz wrote: >On 03/29/2017 07:38 AM, Leon Fauster wrote: >>We have good results with http://www.shorewall.net/ an iptables >>"abstraction". >>Despite its not a GUI, the streamlined configuration helps to be effective. > >From what I can determine, it is still iptables. Not firewalld. That's what Leon said, shorewall is an

Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? mark Ahh, I did not know of this. Well, I'm back to suggesting OP take a little time and get comfortable with firewall-cmd in the terminal. If we want our solid redhat clone then systemd, NetworkManager, and firewalld are soldered into the foreseeable future.

Now with firewalld, opening up ports is now 'better' done by opening services. So what do I need, for starters it seems: dns, dhcp, dhcpv6, samba, kerberos Here is the list of services: RH-Satellite-6 amanda-client bacula bacula-client dhcp dhcpv6 dhcpv6-client dns ftp high-availability http https imaps ipp ipp-client ipsec kerberos kpasswd ldap ldaps libvirt libvirt-tls mdns mountd

I am familiar with using commands like: firewall-cmd --permanent --add-service=http To enable firewalld services. I am also aware that this is through xml 'scripts' in: /usr/lib/firewalld/services/ But what I find interesting is what services are there and which are not. I went a'lookin with: grep "port=" /usr/lib/firewalld/services/*|more And found some like:

Progress... On 08/27/2015 08:50 AM, L.P.H. van Belle wrote: > After reading this thread.. and ..seeing the comments.. > > I googled a bit around. and yes.. more then 5 sec.. ;-) > > I wonder why almost every "centos/redhat/rpm based" howto removes firewalld with the base iptables service > now, i'm not "pro" systemd or con systemd, i use it but i set my

On 27/08/15 13:50, L.P.H. van Belle wrote: > After reading this thread.. and ..seeing the comments.. > > I googled a bit around. and yes.. more then 5 sec.. ;-) > > I wonder why almost every "centos/redhat/rpm based" howto removes firewalld with the base iptables service Now here's a funny thing, I was searching the samba wiki for 'firewall' and found there