firewalld ssh restrict

Jonathan Ramirez jonram at adminondemand.net
Wed Jun 10 21:34:51 UTC 2015


On 06/10/2015 12:31 PM, Anton Matta wrote:
> Hi,
>
> I red man firewalld.richlanguage really focussed and some searched
> webpages and I really don't know how to restrict ssh with systemd like
> from 2 sources ok, other not ok?
>
> a.b.c.d > ssh  OK
> b.c.d.a > ssh OK
> x.x.x.x (everyone else) > REJECT, DROP, whatever.
>
> Do You have any ideas? Thanks for reply. m.
>
>
> _______________________________________________
> firewalld-users mailing list
> firewalld-users at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
Hi Anton.

This is how I did it:

firewall-cmd --zone=THE-ZONE-YOU-WANT --remove-service=ssh [ENTER]
firewall-cmd --zone=THE-ZONE-YOU-WANT --remove-service=ssh
--permanent[ENTER]
firewall-cmd --add-rich-rule='rule family="ipv4" source
address="a.b.c.d" service name="ssh" log prefix="ssh" level="info" limit
value="1/m" accept' [ENTER]
firewall-cmd --add-rich-rule='rule family="ipv4" source
address="a.b.c.d" service name="ssh" log prefix="ssh" level="info" limit
value="1/m" accept' --permanent [ENTER]

Hope that helps.

-- 

Atte.

=========================
*Ing.**Jonathan J. Ramirez C.**
*

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/firewalld-users/attachments/20150610/6832c5cb/attachment-0001.html>


More information about the firewalld-users mailing list