- Lab
- Cloud
- Security
Advanced Firewalld
In this hands-on lab, you will need to use firewalld to create a new service, add that new service to permitted connections for the default zone, drop all traffic from an IPSet, and add a rich rule for traffic from a specific subnet.
Path Info
Table of Contents
-
Challenge
Create a new service in firewalld.
- The service name should be: jobsub.
- The service's ports are: TCP 5671-5677.
- This service should be enabled for the default zone (public).
-
Challenge
Create an IPSet in firewalld.
You will need to create an IPSet for the following IPs and name it
kiosk:- 10.0.1.12
- 192.168.1.0/24
Send all traffic from the kiosk IPSet to the drop zone.
-
Challenge
Add a rich rule for TCP 8080 traffic.
Add a rich rule to accept traffic from 10.0.1.0/24 to port 8080:
firewall-cmd --permanent --add-rich-rule='rule family=ipv4 source address=10.0.1.0/24 port port=8080 protocol=tcp accept
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.