Firewall and SELINUX - RHCSA

Nota:

• https://www.goconqr.com/pt-BR/mind_maps/18895089/edit

Adjunto:

• Configurando um Roteador

1. yum list installed | egrep "iptables|firewalld"
2. IPTABLES
   1. cat /etc/sysconfig/iptables
   2. iptables -L
   3. iptables -F
   4. iptables -t filter -A INPUT -p tcp --dport 80 -j ACCEPT
   5. iptables -A OUTPUT -p icmp -j DROP
   6. iptables -I INPUT -m state --state NEW,ESTABLISHED -p tcp --dport 25 \ -j DROP
   7. iptables -A FOWARD -d 192.168.0.0/24 -j ACCEPT
   8. service iptables save
   9. iptables-save > /iptablesbkp
   10. iptables-restore < /iptablesbkp
3. systemctl enable firewalld
4. systemctl start firewalld
5. Firewalld
   1. ll /usr/lib/firewalld
   2. ll /etc/firewalld
   3. firewall-cmd
      1. --state
      2. --reload
      3. --permanent
      4. --get-default-zone
      5. --get-services
      6. --list-all
      7. --list-services
      8. --add-service
      9. --remove-service
      10. --query-service
      11. --list-ports
      12. --add-port
      13. --remove-port
      14. --query-port
      15. --list-forward-ports
      16. --add-forward-port
      17. --remove-forward-port
      18. --query-forward-port
      19. --list-interfaces
      20. --add-interfaces
      21. --remove-interfaces
      22. --query-interfaces
      23. RULES
          1. firewall-cmd --get-default-zones
          2. firewall-cmd --permanent --add-service=http
          3. firewall-cmd --reload
          4. firewall-cmd --add-port=443/tcp
          5. firewall-cmd --permanent --add-port=59001-59010/tcp ; firewall-cmd --reload
          6. firewall-cmd --list-services
          7. firewall-cmd --list-ports
          8. iptables -L -n

             Nota:

             • chain IN public allow
          9. firewall-cmd --state
          10. firewall-cmd --permanent --remove-service=http
          11. firewall-cmd --reload