similar to: Stupid C7 firewall question

On 10/23/18 14:45, Phil Perry wrote: > On 23/10/18 19:05, mark wrote: >> Been looking, and haven't found the answer: in c7, is there a firewall-cmd >> command, or a systemctl cmd, to check whether ip6tables firewall is >> running > > Yes, the same as for any other service: > > systemctl status ip6tables.service > Um, no. I've discovered that on our

On 10/23/18 11:45 AM, Phil Perry wrote: > > Yes, the same as for any other service: > systemctl status ip6tables.service That will not provide useful information if the system is using firewalld, as is the default configuration.

On a similar note, Is there any reason to use Firewalld over IPTables? I'm incredibly new to Linux administration, and would like to your guys' opinions on it. Many thanks, Joel. On Wed, 24 Oct 2018 at 12:23, mark <m.roth at 5-cent.us> wrote: > On 10/23/18 14:45, Phil Perry wrote: > > On 23/10/18 19:05, mark wrote: > >> Been looking, and haven't found the

On 10/26/18, Andrew Pearce <andrew at andew.org.uk> wrote: > On 2018-10-26 16:25, mark wrote: > I believe this should remove any ipv6 rules (rules and chains) > > ip6tables -F > ip6tables -X You might want to clear the other tables, too: for x in filter nat mangle raw security "" do ip6tables ${x:+-t $x} -F ip6tables ${x:+-t $x} -X done > You may need to

Working on a script, and to test, I need to shut down ip6tables temporarily. firewalld is running; is there any way to shut down *just* ip6tables? I tried installinf iptables-services, and did a systemctl stop ip6tables, and no joy. mark

Being a fan of IPtables and dreading the eventual transition to Centos 7, I wondered if in C7's firewalld an interface can be assigned to a single zone or to multiple zones such as 'private' and 'trusted'. For example interface em1 having both trusted and public zones assigned to it. If multiple zones per interface are permitted presumably one can segregate traffic by IP range

On Tue, July 12, 2016 12:51, Earl A Ramirez wrote: > if I had any knowledge of systemd and other things that are more than >> totally different ... >> I'm not an expert; is ip(6)tables still part of CentOS 7? >> > > It is available but not installed by default, you will have to install it > and stop and disable firewalld. > and this done by which shell command?

On 23/10/18 19:05, mark wrote: > Been looking, and haven't found the answer: in c7, is there a firewall-cmd > command, or a systemctl cmd, to check whether ip6tables firewall is > running > Yes, the same as for any other service: systemctl status ip6tables.service

I apologize if this has been asked and answered, but I googled and attempted things for several hours today without success. I have a freshly installed CentOS 7 system that I'd like to disable the firewall and all iptables rules. Basically the equivalent of doing iptables -F In a nutshell I've tried the following commands, in many different ways and orders, but when the system

Joel Freeman wrote on 10/24/2018 9:06 PM: > On a similar note, Is there any reason to use Firewalld over IPTables? > > I'm incredibly new to Linux administration, and would like to your guys' > opinions on it. > > Many thanks, > Joel. My first impression was that firewalld and NetworkManager had a more desktop oriented/plug-n-play type feel compared to traditional

On Mon, 29 Aug 2016 09:53:33 -0300 Maiquel Consalter <maiquelconsalter at gmail.com> wrote: > >You say you have compiled Samba yourself, so I take it that Samba is > i>nstalled at /usr/local/samba, if so, is the new samba in your PATH > i>and > >are there any OS Samba packages installed ? > I compile myself. I removed all packets for samba before start the >

On Oct 24, 2018, at 8:06 PM, Joel Freeman <joel at joelazot.xyz> wrote: > > Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ > I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd --add-service=ftp or whatever that does under the hood, which probably resembles the 7 commands given here:

On Mon, 29 Aug 2016 08:09:46 -0300 Maiquel Consalter via samba <samba at lists.samba.org> wrote: > Hi Folks, > i tryed make some tests, but the problem it the same. Someone have > some idea how i solve my problem ? I try the new instalation, upgrade > all packates but before 1 minute the process still in 100% and the > process is rpc_server. > You say you have compiled

On Sun, Apr 19, 2020 at 9:26 AM Anand Buddhdev <anandb at ripe.net> wrote: > > On 19/04/2020 14:58, Jeffrey Walton wrote: > > Hi Jeffrey, > > > The offending host is 59.64.129.175. To err on the side of caution we > > attempted to block the entire netblock. According to whois data, > > that's 59.64.128.0-59.64.159.255. > > > > iptables -A

Does someone have a link to a how-to-do-it with firewalld, not "disable firewalld and use iptables"? mark

On 2018-10-26 16:25, mark wrote: > Working on a script, and to test, I need to shut down ip6tables > temporarily. firewalld is running; is there any way to shut down *just* > ip6tables? > > I tried installinf iptables-services, and did a systemctl stop > ip6tables, > and no joy. > > mark > > _______________________________________________ > CentOS

Hey all, I'm having a little trouble opening up a port on a C7 machine. Here's the default zone: [root at appd:~] #firewall-cmd --get-default-zone home So I try to add the port: [root at appd:~] #firewall-cmd --zone=home --add-port=8181/tcp success Then I reload firewalld: [root at appd:~] #firewall-cmd --reload success Simple! That should do it. Right? Well not quite. Cuz when

ipset on CentOS6 comes with /etc/rc.d/init.d/ipset so that "service ipset reload" can be used to (re)load the configuration. CentOS7 doesn't come with an equivalent for systemd: # systemctl reload ipset.service Failed to issue method call: Unit ipset.service failed to load: No such file or directory. # systemctl start ipset.service Failed to issue method call: Unit ipset.service

On 10/25/18 2:41 AM, Warren Young wrote: > On Oct 24, 2018, at 8:06 PM, Joel Freeman <joel at joelazot.xyz> wrote: >> >> Is there any reason to use Firewalld over IPTables? > > Lots: https://firewalld.org/ > >> I'm incredibly new to Linux administration > > Given that, which would you rather type: > > $ sudo firewall-cmd

Gordon Messmer wrote: > On 10/26/18, Andrew Pearce <andrew at andew.org.uk> wrote: > >> On 2018-10-26 16:25, mark wrote: >> I believe this should remove any ipv6 rules (rules and chains) >> >> ip6tables -F ip6tables -X > > You might want to clear the other tables, too: > > > for x in filter nat mangle raw security "" do ip6tables ${x:+-t