Linux Administration Cookbook

firewall-cmd

Our web server is listening on all interfaces (the default) and we're going to allow connections to it through eth1.

We know that eth1 is in the default (public) zone, thanks to the previous section:

$ sudo firewall-cmd --zone public --list-allpublic (active)  target: default  icmp-block-inversion: no  interfaces: eth0 eth1  sources:   services: ssh dhcpv6-client  ports:   protocols:   masquerade: no  forward-ports:   source-ports:   icmp-blocks:   rich rules: 

This means that we have to add another port allowance to our zone, enabling connections to 8000/tcp.

In the following code, we're adding to our firewall configuration, but we're not modifying the running config—we're adding the permanent option so that the rule is loaded on a firewall ...