Initial Settings : Firewall2024/10/31 |
Configure Firewall and SELinux.
|
|
[1] | It's possible to see FireWall Service Status like follows. (enabled by default) |
[root@localhost ~]# systemctl status firewalld ● firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; preset> Drop-In: /usr/lib/systemd/system/service.d +-- 10-timeout-abort.conf Active: active (running) since Thu 2024-10-31 09:41:51 JST; 2min 55s ago Invocation: f263dd5b57a54ce283e6222c9058fa0d Docs: man:firewalld(1) Main PID: 888 (firewalld) Tasks: 2 (limit: 4645) Memory: 42.1M (peak: 42.4M) CPU: 256ms CGroup: /system.slice/firewalld.service ..... ..... # [Active: active (running) ***] means firewalld is running now |
[2] |
If you use FireWall service, it needs to modify FireWall settings manually because incoming requests for services are mostly not allowed by default.
Refer to here for basic Firewall operation and settings (CentOS Stream 9). Configuration examples of Fedora 41 on this site are based on the environment Firewalld service is always enabled. |
[3] | If you don't need FireWall service because of some reasons like that some FireWall Machines are running in your Local Netowrk or others, it's possible to stop and disable FireWall service on Fedora server like follows. |
# disable service [root@localhost ~]# systemctl disable firewalld Removed '/etc/systemd/system/multi-user.target.wants/firewalld.service'. Removed '/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service'. |
Initial Settings : SELinux
|
[4] | It's possible to show current SELinux (Security-Enhanced Linux) Status like follows. (enabled by default) |
[root@localhost ~]# getenforce
Enforcing # SELinux is enabled
|
[5] |
If you enable SELinux, there are cases to modify SELinux policy manually because sometimes SELinux stop applications.
Refer to here for basic SELinux operation and settings (CentOS Stream 9). Configuration examples of Fedora 41 on this site are based on the environment SELinux is always Enforcing. |
[6] | If you don't need SELinux feature because of some reasons like that your server is running only in Local safety Network or others, it's possible to disable SELinux like follows. |
# disable SELinux [root@localhost ~]# grubby --update-kernel ALL --args selinux=0
# if falling back to enable, run like follows [root@localhost ~]# grubby --update-kernel ALL --remove-args selinux |
Sponsored Link |