Firewalld: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
Line 11: Line 11:
<tt>firewalld</tt> is a firewall service daemon with D-BUS interface. It is used to implement a dynamic firewall. The firewall supports network/firewall zones to define the trust level of network connections or interfaces. It has support for IPv4, IPv6 and for ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an interface for services or applications to add firewall rules directly.
<tt>firewalld</tt> is a firewall service daemon with D-BUS interface. It is used to implement a dynamic firewall. The firewall supports network/firewall zones to define the trust level of network connections or interfaces. It has support for IPv4, IPv6 and for ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an interface for services or applications to add firewall rules directly.


<tt>firewalld</tt> comes with a graphical configuration tool <tt>firewall-config</tt>. <tt>firewalld</tt> uses the [[iptables Concepts#iptables|iptables tool]] to communicate with [[iptablesConcepts#netfilter|netfilter]] in the kernel.
<tt>firewalld</tt> comes with a graphical configuration tool <tt>firewall-config</tt>. <tt>firewalld</tt> uses the [[iptables Concepts#iptables|iptables tool]] to communicate with [[iptables Concepts#netfilter|netfilter]] in the kernel.

Revision as of 19:09, 5 January 2016

External

Internal

Overview

firewalld is a firewall service daemon with D-BUS interface. It is used to implement a dynamic firewall. The firewall supports network/firewall zones to define the trust level of network connections or interfaces. It has support for IPv4, IPv6 and for ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an interface for services or applications to add firewall rules directly.

firewalld comes with a graphical configuration tool firewall-config. firewalld uses the iptables tool to communicate with netfilter in the kernel.