Hello,

On 12/18/2015 06:06 PM, mail.mthakkar@gmail.com wrote:

On my server firewalld is active as below:

# systemctl status firewalld
firewalld.service - firewalld - dynamic firewall daemon
    Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled)
    Active: active (running) since Thu 2015-12-17 02:04:09 CST; 1 day 8h ago
  Main PID: 16793 (firewalld)
    CGroup: /system.slice/firewalld.service
            └─16793 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

Dec 17 02:04:09 hostname systemd[1]: Starting firewalld - dynamic firewall daemon...
Dec 17 02:04:09 hostname systemd[1]: Started firewalld - dynamic firewall daemon.

# firewall-cmd --list-all
public (default, active)
   interfaces: eth0
   sources:
   services: dhcpv6-client ssh
   ports:
   masquerade: no
   forward-ports:
   icmp-blocks:
   rich rules:
       
But still traffic from all other services like http, mysql are coming in. It is not getting blocked. It is looking like firewalld has no effect at all.

Server detail:
==========
CentOS 7
kernel: 3.10.0-229.4.2.el7.x86_64
firewalld-0.3.9-14.el7.noarch

Kindly advise.
_______________________________________________
firewalld-users mailing list
firewalld-users@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/firewalld-users@lists.fedorahosted.org

please attach the output of
1) iptables-save
2) ip6tables-save
3) firewall-cmd --list-all-zones

Do you have trusted sources or interfaces?
From where are you connecting to the services that are still accessible?
Are you using IPv4 and/or IPv6?

Regards,
Thomas

_______________________________________________
firewalld-users mailing list
firewalld-users@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/firewalld-users@lists.fedorahosted.org