
Use the firewall-cmd command to interact with the firewalld configuration. A default zone is also available to manage traffic that does not match any zones.įirewalld is the daemon's name that maintains the firewall policies. A network interface is assigned to one or more zones, and each zone contains a list of allowed ports and services.

The traffic is allowed or rejected if the source address network matches a rule.įirewalld uses the concept of zones to segment traffic that interacts with your system. You can block specific subnets and IP addresses.Īs with any firewall, firewalld inspects all traffic traversing the various interfaces on your system. Learning path: Deploy a cluster in Red Hat OpenShift Service on AWS (ROSA)įirewalld can restrict access to services, ports, and networks.

Get a Red Hat Learning Subscription trial.Learn about Red Hat Certified System Administrator (RHCSA) certification.Explore Red Hat training and certification options.
