- Lab
-
Libraries: If you want this lab, consider one of these libraries.
- Cloud
- Security
Advanced Firewalld
In this hands-on lab, you will need to use firewalld to create a new service, add that new service to permitted connections for the default zone, drop all traffic from an IPSet, and add a rich rule for traffic from a specific subnet.
Lab Info
Table of Contents
-
Challenge
Create a new service in firewalld.
- The service name should be: jobsub.
- The service's ports are: TCP 5671-5677.
- This service should be enabled for the default zone (public).
-
Challenge
Create an IPSet in firewalld.
You will need to create an IPSet for the following IPs and name it
kiosk:- 10.0.1.12
- 192.168.1.0/24
Send all traffic from the kiosk IPSet to the drop zone.
-
Challenge
Add a rich rule for TCP 8080 traffic.
Add a rich rule to accept traffic from 10.0.1.0/24 to port 8080:
firewall-cmd --permanent --add-rich-rule='rule family=ipv4 source address=10.0.1.0/24 port port=8080 protocol=tcp accept
Real skill practice before real-world application
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Learn by doing
Engage hands-on with the tools and technologies you’re learning. You pick the skill, we provide the credentials and environment.
Follow your guide
All labs have detailed instructions and objectives, guiding you through the learning process and ensuring you understand every step.
Turn time into mastery
On average, you retain 75% more of your learning if you take time to practice. Hands-on labs set you up for success to make those skills stick.