On Tue, Mar 14, 2023 at 11:00:45AM +0100, GAMBINI Gilian wrote:
Hello
Im looking for a firewalld equivalent of iptables option "-m state --state ESTABLISHED,RELATED". I use firewalld 0.9.3 on a RHEL8.7 with nftables backend. nftables support conntrack state (like "ct state { established, related }") but i dont find this in firewalld rich rules documentation. Documentation talk about helpers associate to services but i just dont understand how it work.
If i accept some INPUT connexion on a specific port and want to allow tcp response on OUTPUT (ie with established or related state), can you confirm me i need to bypass firewalld and add directly a nft rules on the right chain ? Thank you, Gilian.
Andrei did a good job of answering you questions. I'd like to also point you to the concepts page.