List overview
Download

firewalld-users March 2019

firewalld-users@lists.fedorahosted.org

2 participants
1 discussions

Start a nNew thread

Allow any source in one specific zone to initiate an http connection to a second specific zone
by Eric Smith 08 Mar '19

08 Mar '19

I'm confused about services enabled in a zone because the docs suggest that it allows that service on destinations in the zone to be accessed from sources outside the zone, but then I've seen some places on blogs and forums that suggest that the enabled services for the zone affect outbound connections from sources in the zone. Is it controlling inbound, outbound, or both? I have an http server in zone1, and I want to allow any source in zone2 to connect to it (but not vice versa). How do I do that? I tried setting a "rich rule" for zone1, but I couldn't figure out how to use zone2 as the source in a rule. Is that not possible? Thanks! Eric

2 3