On 08/28/2014 04:33 PM, Patrick Hinkley wrote:
Given an IP address, how can I prevent any connection both to and
from
that IP? If there are multiple methods, please describe the pros and
cons of each.
see
http://fedoraproject.org/wiki/Features/FirewalldRichLanguage#Examples
reject incoming from IP:
firewall-cmd --add-rich-rule='rule family="ipv4" source
address="192.168.1.2" reject'
reject incoming to IP:
firewall-cmd --add-rich-rule='rule family="ipv4" destination
address="192.168.1.2" reject'
So far we don't handle outbound traffic in firewalld.
--
Jiri