Managing firewall rules is a crucial security task on Linux systems. In #Debian 13, depending on the server configuration, different firewall tools can be installed. The most common are #UFW, #iptables, or #firewalld. You must first check if your firewall is active and what rules are in place. Also, make sure that network ports are open or blocked.🔥

Continue reading:👇
https://greenwebpage.com/community/how-to-check-firewall-status-on-debian-13/

#UFW #IPTables #Firewalld #FirewallStatus #Debian13 #LinuxAdministration #GreenWebpage

How to Check Firewall Status on Debian 13 - Greenwebpage Community

This guide will explain how to check the firewall status in Debian 13, with each step explained clearly before you run any commands.

Greenwebpage Community

next #firewalld oddity; you can't use 'firewall-cmd' when firewalld is stopped (like configuring a rootfs not yet booted), but it has got 'firewall-offline-cmd' that lets you do it - except the options are sometimes different; e.g.
firewall-cmd --zone=external --remove-service ssh --permanent
becomes
firewall-offline-cmd --zone=external --remove-service-from-zone=ssh

(Which is odd anyway because --permanent works on the xml files, so feels like it should work offline)

A thread dumping some (non-obvious?) notes about #firewalld - I think I've got it doing what I want, but it's been a bit of a fight, and I made a bunch of wrong turns.

It's a layer on top of nftables or iptables; is XML based but you can just drive it from a command line tool firewall-cmd and avoid the XML.
It's main idea is a graph of 'zones' where a 'zone' represents 1 or more NICs. The 'zones' are linked via 'policies' saying what can flow between them.

https://firewalld.org/documentation/concepts.html

1/n 🧵

Concepts

Welcome to the firewalld project homepage! Firewalld provides a dynamically managed firewall with support for network/firewall zones that defines the trust level of network connections or interfaces.

firewalld
I think #firewalld is slowly doing what I want - I asked on their irc channel and after a bit 'erig' came back and helped me; I'm going to post some summaries of the things which confused me - because it took me quite a while and really needed those hints, the docs just weren't enough for me.
OK, firewalld is actually annoying me now - I thought I had a simple setup working to start with; masquerade to outside world [all tested in a VM] but no; it's not masquerading trusted->external even though the external zone has masquerade set. The packets are just dropping through unchanged.
And I've spent a long time playing with 'policy' but they aren't doing what I want. Hmph. Any #firewalld people?
@MsDropbear42 @Foxboron I’ve found the #cockpit webui to be the best interface for managing #firewalld. It converts it into the best Linux firewall imho.
@Foxboron

firewalld confuses & terrifies me.

gufw holds my hand & comforts me.

"writing nftables rules" is a skill i shall never possess even if i exist another 42 years.

I installed & use
gufw in my primary pooter's ArchLinux, SparkyLinux boots that have existed for many years, & in said pooter's newest boot, KDELinux, i was greatly relieved to find #gufw already part of the furniture.

when i use
#Fedora & #openSUSE distros, their use of #firewalld simply intimidates me... it presumes far too much innate user knowledge than i have.

#DropbearPooterising #Linux #LinuxWomen #FOSS #ArchLinux #KDEPlasma #SparkyLinux #KDELinux ​​ ​​ ​

Firewalld è un sistema di gestione del firewall moderno e dinamico, progettato per semplificare la configurazione della sicurezza su Linux. #Firewalld #Software #Linux

https://www.linuxeasy.org/firewalld-su-linux-sicurezza-dinamica-e-semplificata-per-tutti/?utm_source=mastodon&utm_medium=jetpack_social

Firewalld su Linux sicurezza dinamica e semplificata per tutti

Firewalld è un sistema di gestione del firewall moderno e dinamico, progettato per semplificare la configurazione della sicurezza su Linux.

Linux Easy - News da Mondo Linux

🚀CentOS 10 includes a firewall management tool called firewalld. This tool provides network security through the control of incoming and outgoing traffic. CentOS’s firewalld service makes it easy to manage network security on Linux servers. You may need to disable your firewall in some situations, such as when troubleshooting a network issue, installing a web app, or testing connectivity.🔥

https://greenwebpage.com/community/disable-firewall-on-centos-10/

#DisableFirewall #Firewalld #Security #CentOS10 #LinuxAdministration

Disable Firewall on CentOS 10: Quick and Safe Method

This guide will teach you how to disable the CentOS 10 firewall using temporary and permanent methods safely.

Greenwebpage Community

2/2
#firewalld añade funcionalidades como zonas de seguridad y una API, que facilitan la administración, pero como backend usa nftables o iptables.

👉 Conclusión: cualquier firewall que utilices en #Linux en la actualidad, seguramente por debajo esté escribiendo reglas de #iptables o #nftables.

✨ Sabiendo configurar estos backends directamente puede ayudarte a entender y solucionar muchos problemas! 🙂

#gnu #linux #learning #educacion #softwarelibre #opensource #freesoftware #sysadmin #devops