<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#330033">
On 06/10/2015 12:31 PM, Anton Matta wrote:<br>
<blockquote
cite="mid:CADpW653fiUp5LK7ULCoq1FXOJ8spC7owkDx=aweHv1hHvdw_YA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>Hi,<br>
</div>
<br>
</div>
I red man firewalld.richlanguage really focussed and some
searched webpages and I really don't know how to restrict
ssh with systemd like from 2 sources ok, other not ok?<br>
<br>
</div>
a.b.c.d > ssh OK<br>
</div>
b.c.d.a > ssh OK<br>
</div>
<div>x.x.x.x (everyone else) > REJECT, DROP, whatever.<br>
<br>
</div>
Do You have any ideas? Thanks for reply. m.</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
firewalld-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:firewalld-users@lists.fedorahosted.org">firewalld-users@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/firewalld-users">https://lists.fedorahosted.org/mailman/listinfo/firewalld-users</a>
</pre>
</blockquote>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<font face="DejaVu Sans">Hi Anton.<br>
<br>
This is how I did it:<br>
<br>
firewall-cmd --zone=THE-ZONE-YOU-WANT --remove-service=ssh [ENTER]<br>
firewall-cmd --zone=THE-ZONE-YOU-WANT --remove-service=ssh
--permanent[ENTER]<br>
<span style="color: rgb(0, 0, 0); font-size: medium; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 32px; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
word-spacing: 0px; display: inline ! important; float: none;">firewall-cmd
--add-rich-rule='rule family="ipv4" source address="a.b.c.d"
service name="ssh" log prefix="ssh" level="info" limit
value="1/m" accept' [ENTER]<br>
firewall-cmd --add-rich-rule='rule family="ipv4" source
address="a.b.c.d" service name="ssh" log prefix="ssh"
level="info" limit value="1/m" accept' --permanent</span>
[ENTER]<br>
<br>
Hope that helps.<br>
<font face="DejaVu Sans"><br>
</font></font>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<title></title>
<meta name="generator" content="LibreOffice 4.3.5.2.0 (Linux)">
<meta name="created" content="00:00:00">
<meta name="changed" content="2015-01-14T11:19:05.555602129">
<meta name="created" content="00:00:00">
<meta name="changed" content="2015-01-07T19:34:58.438675476">
<meta name="created" content="2015-01-07T19:22:14.221064209">
<style type="text/css">
                @page { margin: 0.79in }
                p { margin-bottom: 0.1in; color: #000000; line-height: 120% }
                a:link { so-language: zxx }
        </style>
<p style="margin-bottom: 0in; line-height: 100%"><font
color="#003366"><font face="Cantarell"><font style="font-size:
11pt" size="2">Atte.</font></font></font><font
face="Cantarell"><font style="font-size: 11pt" size="2"><br>
<br>
</font></font><font color="#003366"><font face="Cantarell"><font
style="font-size: 11pt" size="2">=========================</font></font></font><font
face="Cantarell"><font style="font-size: 11pt" size="2"><br>
</font></font><font color="#003366"><font face="Cantarell"><font
style="font-size: 11pt" size="2"><b>Ing.</b></font></font></font><font
color="#003366"><font face="Cantarell"><font style="font-size:
11pt" size="2">
</font></font></font><font color="#003366"><font
face="Cantarell"><font style="font-size: 11pt" size="2"><b>Jonathan
J.
Ramirez C.</b></font></font></font><font color="#003366"><font
face="Cantarell"><font style="font-size: 11pt" size="2"><b><br>
</b></font></font></font></p>
</div>
</body>
</html>