ssh only from known ip addresses

Michael C Cambria mcc at fid4.com
Sat Mar 22 20:51:04 UTC 2014


On 03/22/14 16:36, Jorge Fábregas wrote:
> On 03/22/2014 04:07 PM, Michael C Cambria wrote:
>> Is there firewalld-cmd syntax for this?  I'm assuming there is given I
>> must have screwed the default up in the first place.  I'm using Fedora
>> 19 running in a headless VM.
>
> I'm really not sure about firewall-cmd but you could just modify the XML
> definition file for the zone located at:
>
> /etc/firewalld/zones/public.xml
>
> ..and change :
>
> <zone target="REJECT">
> to
> <zone target="DROP">
>

None of my zone's seem to have existing xml for "zone target":


[root at node zones]# pwd
/etc/firewalld/zones
[root at node zones]# grep target *.xml
[root at node zones]#


I might add it and play around.

Thanks!
MikeC



More information about the firewalld-users mailing list