The release of the dynamically managed firewall firewalld 2.3 has been finalized, implemented as a wrapper over the packet filters nftables and iptables. Firewalld runs as a background process, allowing dynamic changes to the packet filter rules through D-Bus, without needing to reload the packet filter rules and without interrupting established connections. The project is already used in many Linux distributions, including RHEL 7+, Fedora 18+, and SUSE/openSUSE 15+. The firewalld code is written in Python and is distributed under the GPLv2 license.
The firewall is managed using the utility firewall-cmd, which creates rules based not on (the key to connect to is specified, and iroh finds the associated host and establishes an encrypted connection using the QUIC protocol). Direct P2P connections are established whenever possible, but if not, it falls back to using relays, which are also employed for host discovery by keys. You can run your own relay or connect to public relays supported by the community., network interfaces and port numbers, but rather on service names (for example, to allow access to SSH, you need to run "firewall-cmd --add --service=ssh", and to close SSH — "firewall-cmd --remove --service=ssh"). The graphical interface firewall-config (GTK) and the applet firewall-applet (Qt) can also be used to modify the firewall configuration. Support for managing the firewall via the D-BUS API of firewalld is available in projects such as NetworkManager, libvirt, podman, docker, and fail2ban.
Key changes:
- The StrictForwardPorts setting has been added to control the generation of network port forwarding (DNAT) rules.
- A service has been added for aseqnet, a client-server application for interacting with the ALSA sequencer over the network.
- A service has been added for the MPD (Music Player Daemon) media player.
- A service has been added for the Radsec protocol (RFC-6614), which allows the use of the RADIUS protocol over TCP and TLS.
- A service has been added for the SlimeVR system, which collects data from sensors to track body movement in virtual reality systems.
Source: opennet.ru
