Re: [CentOS] Stupid C7 firewall question

2018-10-26 Thread me
On Thu, 25 Oct 2018, Valeri Galtsev wrote: Thanks Warren for nice quick start covering everything one needs to configure firewalld. There is one thing I am related to "direct iptables manipulation" which is: suppose I made configuration of some machine, which then I am going to replicate just

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Kenneth Porter
On 10/25/2018 12:41 AM, Warren Young wrote: to make them permanent, you have to edit `/etc/sysconfig/iptables` with a somewhat different syntax. Or use "service iptables save". On systems where I use raw iptables, I set the thing up with the command line tools and then use that command to sn

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Warren Young
On Oct 25, 2018, at 9:04 AM, Valeri Galtsev wrote: > > suppose I made configuration of some machine, which then I am going to > replicate just by using kickstart when building new machines. What should I > add to kickstart configuration file to make my configured firewalld part > reproduced on

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Jonathan Billings
On Thu, Oct 25, 2018 at 09:53:13AM -0500, Blake Hudson wrote: > My first impression was that firewalld and NetworkManager had a more desktop > oriented/plug-n-play type feel compared to traditional tools like network > and iptables so I chose to stick with the latter on my servers (manual > IP4/IP

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Valeri Galtsev
On 10/25/18 2:41 AM, Warren Young wrote: On Oct 24, 2018, at 8:06 PM, Joel Freeman wrote: Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd --add

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Blake Hudson
Joel Freeman wrote on 10/24/2018 9:06 PM: On a similar note, Is there any reason to use Firewalld over IPTables? I'm incredibly new to Linux administration, and would like to your guys' opinions on it. Many thanks, Joel. My first impression was that firewalld and NetworkManager had a more

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Warren Young
On Oct 24, 2018, at 8:06 PM, Joel Freeman wrote: > > Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ > I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd --add-service=ftp or whatever that does under th

Re: [CentOS] Stupid C7 firewall question

2018-10-24 Thread Joel Freeman
On a similar note, Is there any reason to use Firewalld over IPTables? I'm incredibly new to Linux administration, and would like to your guys' opinions on it. Many thanks, Joel. On Wed, 24 Oct 2018 at 12:23, mark wrote: > On 10/23/18 14:45, Phil Perry wrote: > > On 23/10/18 19:05, mark wrote:

Re: [CentOS] Stupid C7 firewall question

2018-10-24 Thread mark
On 10/23/18 14:45, Phil Perry wrote: On 23/10/18 19:05, mark wrote: Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running Yes, the same as for any other service: systemctl status ip6tables.service

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Phil Perry
On 24/10/18 00:35, Gordon Messmer wrote: On 10/23/18 11:45 AM, Phil Perry wrote: Yes, the same as for any other service: systemctl status ip6tables.service That will not provide useful information if the system is using firewalld, as is the default configuration. Thanks. I have firewal

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Gordon Messmer
On 10/23/18 11:45 AM, Phil Perry wrote: Yes, the same as for any other service: systemctl status ip6tables.service That will not provide useful information if the system is using firewalld, as is the default configuration. ___ CentOS mailing lis

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Gordon Messmer
On 10/23/18 11:05 AM, mark wrote: Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running "firewall-cmd --state" will tell you if the daemon is running. If it is, then there should be both IPv4 and

Re: [CentOS] Stupid C7 firewall question

2018-10-23 Thread Phil Perry
On 23/10/18 19:05, mark wrote: Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running Yes, the same as for any other service: systemctl status ip6tables.service __

[CentOS] Stupid C7 firewall question

2018-10-23 Thread mark
Been looking, and haven't found the answer: in c7, is there a firewall-cmd command, or a systemctl cmd, to check whether ip6tables firewall is running mark ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos