Differences

This shows you the differences between two versions of the page.

--- linux_wiki:use_firewalld_and_associated_mechanisms_such_as_rich_rules_zones_and_custom_rules_to_implement_packet_filtering_and_configure_network_address_translation_nat [2018/03/30 00:34]
billdozor [Port Forwarding]
+++ linux_wiki:use_firewalld_and_associated_mechanisms_such_as_rich_rules_zones_and_custom_rules_to_implement_packet_filtering_and_configure_network_address_translation_nat [2019/05/25 23:50] (current)
@@ Line 88: / Line 88: @@
 # Bring interface up
 nmcli con up enp0s9</code>
+----
+====== Help ======
+Finding help in this section.
+  * Firewalld Rich Rules<code bash>man firewalld.richlanguage</code>
+  * Firewall Cmd Man page (forward ports)<code bash>man firewall-cmd</code>
 ----
@@ Line 180: / Line 188: @@
 \\
 **Note:** As of RHEL 7.4, you **do not** need to execute the removal command/network script update like you did in earlier versions. Listed below just in case you get an older version on the exam.
-  * Removal example<code bash>firewall-cmd --remove-interface-enp0s8 --zone=public</code>
+  * Removal example<code bash>firewall-cmd --remove-interface=enp0s8 --zone=public</code>
   * Network script update example<code bash>nmcli con mod enp0s8 connection.zone internal</code>
@@ Line 259: / Line 267: @@
   * log level=notice -> Change log level of http access
   * prefix -> Add this text to the front of the log
-  * limit value -> Limit the amount of connections to 100 a second
+  * limit value -> Limit the amount of logged connection attempts to 100 a second
   * accept -> Accept the connection
@@ Line 299: / Line 307: @@
 They come in from external on one port, and get forwarded to an internal system on a different port.
+\\
 Forward a connection from external 172.16.0.254 (ipa/router) on port tcp/2222 to internal 10.0.0.1 (server1) on port tcp/22
 <code bash>
@@ Line 304: / Line 313: @@
 firewall-cmd --reload
 </code>
+\\
+Test the connection from server2<code bash>[root@server2 ~]# ssh -p 2222 root@172.16.0.254
+The authenticity of host '[172.16.0.254]:2222 ([172.16.0.254]:2222)' can't be established.
+ECDSA key fingerprint is SHA256:klAqN92d6UnV80L99E5TxQHBxFDMSk9HNcL7E4DsKdY.
+ECDSA key fingerprint is MD5:9d:56:7a:12:32:fd:df:b6:9e:6d:4c:9e:1a:72:a0:78.
+Are you sure you want to continue connecting (yes/no)? yes
+Warning: Permanently added '[172.16.0.254]:2222' (ECDSA) to the list of known hosts.
+root@172.16.0.254's password:
+[root@server1 ~]# </code>
+  * server2 connects to port 2222 on the ipa/router VM.
+  * The firewall port forward rule forwards the connection to port 22 on server1
 ----