From Boldcore's wiki
Revision as of 04:31, 7 March 2017 by Admin (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Firewalld rich rule example

Allow connection to IP address and specific port only from specified source IP. 

firewall-cmd --add-rich-rule='rule family="ipv6" source NOT address="2a01:5f0:c001:106:59:0:2:6" destination not address="2a01:5f0:c001:106:59:0:2:30" port port="443" protocol="tcp" log level="info" reject' --permanent --zone="public"

NOTE: This rule is actually used here in Boldcore for communication between Web server and reverse proxy. So, only reverse proxy can access the web server.

Retrieved from "https://wiki.boldcore.eu/index.php?title=Firewalld_rich_rule&oldid=22"