Accessibility to flags and states?

Philippe Marcovici philippepma at free.fr
Mon Apr 23 20:48:45 UTC 2012


Hello.

With firewall-cmd (and/or firewall-config), will it be possible to 
access the protocol flags and the state of the frames?

For example, will it be possible to do the equivalent of the following 
commands?

iptables -A INPUT_TCP -p tcp --syn --dport ssh -m state --state NEW -j 
ACCEPT

or

iptables -A CHECK_BAD_TCP -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP

thx


More information about the firewalld-users mailing list