Changes between Version 5 and Version 6 of SystemAdministration/Hosts/lvps92-51-161-129.dedicated.hosteurope.de

Timestamp:

07/29/15 12:49:23 (9 years ago)

Author:

Willem Elbers

Comment:

--

SystemAdministration/Hosts/lvps92-51-161-129.dedicated.hosteurope.de

@@ -22 +22 @@
 Data
  * /srv/vlo-data
+
+
+Firewalld configuration
+
+http://www.certdepot.net/rhel7-get-started-firewalld/
+http://forums.fedoraforum.org/showthread.php?t=289907
+
+By default interfaces are assigned to the public zone. This zone only allows external ssh access.
+
+Create a new zone "webserver":
+
+Create the new zone
+{{{
+sudo firewall-cmd --permanent --new-zone=webserver
+}}}
+
+Add services to the new zone
+{{{
+sudo firewall-cmd --permanent --zone=webserver --add-service=http
+sudo firewall-cmd --permanent --zone=webserver --add-service=https
+sudo firewall-cmd --permanent --zone=webserver --add-service=ssh
+}}}
+
+Assign a network interface to the zone
+{{{
+firewall-cmd --permanent --zone=webserver --change-interface=venet0
+}}}
+
+Activate the changes
+{{{
+sudo firewall-cmd --reload
+}}}
+