Manage Network Security

Question 1

What does the netfilter framework do?

Answer 1

Enables kernel modules to inspect every packet that traverses the system, including all incoming, outgoing, or forwarded network packets.

Question 2

What does firewalld service do?

Answer 2

Simplifies management by classifying all network traffic into zones. Each zone has its own list of ports and services. The public zone is set as the default zone.

Question 3

How is the firewalld service shipped?

Answer 3

It is shipped with predefined services. You can list these services by using the firewall-cmd –get-services command.

Question 4

How does SELinux control network traffic?

Answer 4

By labeling ports. For example, the ssh_port_tt label is associated with the 22/TCP port. When a process wants to listen on a port, SELinux verfies whether the port’s associated label is allowed to bind that port label.

Question 5

What is the semanage command used for?

Answer 5

To add, delete, and modify labels.