In this lab, we will be installing firewalld and creating firewall rules to permit HTTP and HTTPS traffic in the default zone. Then, we’ll check to make sure the rules have applied.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Install firewalld.
To install firewalld, run the following command:
- sudo apt-get install firewalld
(Note: If you get a lock message, just wait 1-2 minutes and try again):
- sudo apt-get install firewalld
- Identify the default zone of firewalld.
Use the following command to identify which zone is the default zone.
sudo firewall-cmd --get-default-zone- Create firewall rules.
These rules need to take effect immediately without restarting the firewalld service, as well as survive a reboot. This means we must enter two rules for each protocol: one with the
--permanentflag, and one without.Enter:
sudo firewall-cmd --zone=public --add-service=http --permanent sudo firewall-cmd --zone=public --add-service=http sudo firewall-cmd --zone=public --add-service=https --permanent sudo firewall-cmd --zone=public --add-service=httpsCheck to make sure
httpandhttpshave been added, run:
sudo firewall-cmd –list-services- You should see
httpandhttpslisted.
- You should see
