On Mon, Oct 05, 2020 at 03:33:36PM +0000, Jason Long wrote:
Should I remove it from Service?
Yes.
On Monday, October 5, 2020, 04:39:32 PM GMT+3:30, Eric Garver egarver@redhat.com wrote:
On Sun, Oct 04, 2020 at 11:25:14AM -0000, Jason Long wrote:
After it, my rules are:
public (active)  target: default  icmp-block-inversion: no  interfaces: ens192  sources:  services: http https ssh  ports: 990/tcp 40000-50000/tcp  protocols:  masquerade: no  forward-ports:  source-ports:  icmp-blocks:  rich rules:    rule service name="ssh" accept limit value="1/m"
As I said in my other email, this rich is not having the desired effect because "ssh" is still listed in services.