Re: [CentOS] Stupid C7 firewall question

2018-10-26 Thread me
On Thu, 25 Oct 2018, Valeri Galtsev wrote: Thanks Warren for nice quick start covering everything one needs to configure firewalld. There is one thing I am related to "direct iptables manipulation" which is: suppose I made configuration of some machine, which then I am going to replicate just

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Kenneth Porter
On 10/25/2018 12:41 AM, Warren Young wrote: to make them permanent, you have to edit `/etc/sysconfig/iptables` with a somewhat different syntax. Or use "service iptables save". On systems where I use raw iptables, I set the thing up with the command line tools and then use that command to

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Warren Young
On Oct 25, 2018, at 9:04 AM, Valeri Galtsev wrote: > > suppose I made configuration of some machine, which then I am going to > replicate just by using kickstart when building new machines. What should I > add to kickstart configuration file to make my configured firewalld part > reproduced

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Jonathan Billings
On Thu, Oct 25, 2018 at 09:53:13AM -0500, Blake Hudson wrote: > My first impression was that firewalld and NetworkManager had a more desktop > oriented/plug-n-play type feel compared to traditional tools like network > and iptables so I chose to stick with the latter on my servers (manual >

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Valeri Galtsev
On 10/25/18 2:41 AM, Warren Young wrote: On Oct 24, 2018, at 8:06 PM, Joel Freeman wrote: Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Blake Hudson
Joel Freeman wrote on 10/24/2018 9:06 PM: On a similar note, Is there any reason to use Firewalld over IPTables? I'm incredibly new to Linux administration, and would like to your guys' opinions on it. Many thanks, Joel. My first impression was that firewalld and NetworkManager had a more

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Warren Young
On Oct 24, 2018, at 8:06 PM, Joel Freeman wrote: > > Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ > I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd --add-service=ftp or whatever that does under

Re: [CentOS] Stupid C7 firewall question

2018-10-24 Thread Joel Freeman
On a similar note, Is there any reason to use Firewalld over IPTables? I'm incredibly new to Linux administration, and would like to your guys' opinions on it. Many thanks, Joel. On Wed, 24 Oct 2018 at 12:23, mark wrote: > On 10/23/18 14:45, Phil Perry wrote: > > On 23/10/18 19:05, mark

Re: [CentOS] Stupid C7 firewall question

2018-10-24 Thread mark
On 10/23/18 14:45, Phil Perry wrote: On 23/10/18 19:05, mark wrote: Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running Yes, the same as for any other service: systemctl status

Re: [CentOS] Stupid C7 firewall question

2018-10-24 Thread Phil Perry
On 24/10/18 00:35, Gordon Messmer wrote: On 10/23/18 11:45 AM, Phil Perry wrote: Yes, the same as for any other service: systemctl status ip6tables.service That will not provide useful information if the system is using firewalld, as is the default configuration. Thanks. I have

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Gordon Messmer
On 10/23/18 11:45 AM, Phil Perry wrote: Yes, the same as for any other service: systemctl status ip6tables.service That will not provide useful information if the system is using firewalld, as is the default configuration. ___ CentOS mailing

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Gordon Messmer
On 10/23/18 11:05 AM, mark wrote: Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running "firewall-cmd --state" will tell you if the daemon is running. If it is, then there should be both IPv4 and

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Phil Perry
On 23/10/18 19:05, mark wrote: Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running Yes, the same as for any other service: systemctl status ip6tables.service

[CentOS] Stupid C7 firewall question

2018-10-23 Thread mark
Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos