Compare commits

..

No commits in common. "20843b4c570377dd0bd5c92d4cb4613787bac8b6" and "b580ac73b70ccbd402de59518681b948e20e1405" have entirely different histories.

3 changed files with 1 additions and 58 deletions

2
Gemfile.lock generated
View File

@ -209,7 +209,7 @@ GEM
jekyll (>= 3.5, < 5.0)
jekyll-feed (~> 0.9)
jekyll-seo-tag (~> 2.1)
minitest (5.20.0)
minitest (5.19.0)
nokogiri (1.15.4-x86_64-linux)
racc (~> 1.4)
octokit (4.25.1)

View File

@ -32,8 +32,6 @@ and overlay networks that I have interacted with recently._
This post first has list of commands, then explanations that won't be
repeated with IPvX ranges.
Fedora/firewalld? [n/firewalld](/n/firewalld)
```bash
ufw allow 22/tcp
ufw default deny incoming

View File

@ -1,55 +0,0 @@
---
layout: null
permalink: /n/firewalld.html
redirect_from:
- /n/firewall-cmd.html
sitemap: false
---
# Quick note on firewalld usage
This is practically [/ufw](/ufw), but fore Firewalld which Fedora comes with.
The blog post also predates me having a /n directory here.
**_After done, run `sudo firewall-cmd --reload`_**
<!-- editorconfig-checker-disable -->
<!-- prettier-ignore-start -->
<!-- START doctoc generated TOC please keep comment here to allow auto update -->
<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
- [Zones](#zones)
- [Services](#services)
- [Ports](#ports)
<!-- END doctoc generated TOC please keep comment here to allow auto update -->
<!-- prettier-ignore-end -->
<!-- editorconfig-checker-enable -->
## Zones
firewalld zones are privilege of NetworkManager users, this tends to be
a systemd-networkd household. Then again I don't believe in absolutely trusted
zones.
Zone would be specified by `--zone=home` in the commands. The other zone I
could imagine using is `public`.
## Services
```bash
sudo firewall-cmd --add-service=mosh --permanent
```
## Ports
```bash
# TODO: Don't do this, this is a ppor example.
# firewalld surely recognises 631 as a service of some name,
# and as noted before, --zone won't work on my systems.
sudo firewall-cmd --zone=home --permanent --add-port=631/tcp
```
- 631/tcp is used by cups.