firewalld-users June 2013

firewalld-users@lists.fedorahosted.org

3 participants
2 discussions

Zones and Sources (allow internal, deny external connections)
by Nathanael D. Noblet 26 Jun '13

26 Jun '13

Hello, So I've been following firewalld, and previously I was under the assumption that a particular feature wasn't yet there. Now it seems that it is. I have a machine that is on a DMZ so we have an eternal router which hands out a private subnet ips, but forwards all traffic to one machine in that subnet. That machine runs Fedora 19 (firewalld-0.3.3-2). I'm wondering if with the 'sources' option I can open particular services (lets say nfs for example) to the internal subnet, but not the external. Is that the correct understanding of what is meant by sources? If that is the case are there docs/examples of how to create a configuration where some services are allowed by all connections, and others are allowed based on source? -- Nathanael d. Noblet t 403.875.4613

2 1

How to set up NAT?
by Mark Sobell 20 Jun '13

20 Jun '13

Using iptables I set up NAT as follows. How would I do the same under firewalld? Thanks! Mark # iptables -A FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT # iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT # iptables -A FORWARD -j LOG # iptables -t NAT -A POSTROUTING -o eth0 -j MASQUERADE

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users June 2013