Hello,
So I've installed Fedora 18 and with it Firewalld. One thing I haven't figured out is this. I'm wondering how 'smart' the zones are. For example, the internal zone. Does it open those services to ANY request or just to requests coming from an internal source? For example I have a system that is behind a router/firewall. I'd like it to allow all ssh connections. But some other services I'd like accepted only if they are on the same subnet etc... Is that how firewalld works already? If not how do I do this?
---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.
Hello,
On 12/21/2012 05:06 AM, nathanael@gnat.ca wrote:
Hello,
So I've installed Fedora 18 and with it Firewalld. One thing I haven't figured out is this. I'm wondering how 'smart' the zones are. For example, the internal zone. Does it open those services to ANY request or just to requests coming from an internal source? For example
per default the internal zone allows external connections for the following services:
ssh ipp-client mdns samba-client dhcpv6-client
You can customize this for example with the firewall-config application.
I have a system that is behind a router/firewall. I'd like it to allow all ssh connections. But some other services I'd like accepted only if they are on the same subnet etc... Is that how firewalld works already? If not how do I do this?
No it is not yet supported to limit zones or services for addresses or address ranges in an easy way. But I am working on this.
This message was sent using IMP, the Internet Messaging Program.
firewalld-users mailing list firewalld-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
Thomas
firewalld-users@lists.fedorahosted.org
-
Nathanael D. Noblet -
Thomas Woerner