Firewall

Question 1

where are system-defined zone rules stored

Answer 1

/usr/lib/firewalld/zones

Question 2

where are user-defined zone rules stored

Answer 2

/etc/firewalld/zones

Question 3

status of firewalld

Answer 3

sudo firewall-cmd –state

Question 4

determin the name of the current default zone

Answer 4

sudo firewall-cmd –get-default-zone

Question 5

add permanent rule to allow http

Answer 5

sudo firewall-cmd –permanent –add-service http
sudo firewall-cmd –reload
sudo firewall-cmd –list-services

Question 6

see services running

Answer 6

sudo firewall-cmd –list-services
or
cat /etc/firewalld/zones/public.xml

Question 7

add permanent rule for internal zone with a TCP port range 5901-5910

Answer 7

sudo firewall-cmd –add-port 5901-5910/tcp –permanent –zone internal
sudo firewall-cmd –reload

Question 8

change default zone

Answer 8

sudo firewall-cmd –set-default-zone internal
confirm:
sudo firewall-cmd –get-default-zone

Question 9

remove http from public zone

Answer 9

sudo firewall-cmd –remove-service=http –zone public –permanent