Kutulutsidwa kwa firewall firewalld 1.2 yoyendetsedwa mwamphamvu kwasindikizidwa, kukugwiritsidwa ntchito ngati chomangira pazisefera za pakiti za nftables ndi iptables. Firewalld imayenda ngati njira yakumbuyo yomwe imakupatsani mwayi wosintha malamulo osefera paketi kudzera pa D-Bus popanda kuyikanso malamulo osefera paketi kapena kuswa maulalo okhazikika. Pulojekitiyi imagwiritsidwa ntchito kale pamagawidwe ambiri a Linux, kuphatikiza RHEL 7+, Fedora 18+ ndi SUSE/openSUSE 15+. Khodi ya firewall inalembedwa ku Python ndipo ili ndi chilolezo pansi pa layisensi ya GPLv2.
Kuwongolera firewall, firewall-cmd utility imagwiritsidwa ntchito, yomwe, popanga malamulo, sizichokera pa ma adilesi a IP, ma network olumikizirana ndi manambala a doko, koma pa mayina a mautumiki (mwachitsanzo, kuti mutsegule mwayi wa SSH muyenera thamangani "firewall-cmd -add -service= ssh", kutseka SSH - "firewall-cmd -remove -service=ssh"). Kuti musinthe makonzedwe a firewall, mawonekedwe azithunzi a firewall-config (GTK) ndi applet ya firewall-applet (Qt) angagwiritsidwenso ntchito. Thandizo la kasamalidwe ka firewall kudzera pa D-BUS API firewalld likupezeka muma projekiti monga NetworkManager, libvirt, podman, docker ndi fail2ban.
Zosintha zazikulu:
- Ntchito za snmptls ndi snmptls-trap zakhazikitsidwa kuti zitheke kupeza protocol ya SNMP kudzera panjira yolumikizirana yotetezeka.
- Ntchito yakhazikitsidwa yomwe imathandizira ndondomeko yogwiritsidwa ntchito mumtundu wa mafayilo a IPFS.
- Ntchito zowonjezera zothandizidwa ndi gpsd, ident, ps3netsrv, CrateDB, checkmk, netdata, Kodi JSON-RPC, EventServer, Prometheus node-exporter, kubelet-readonly, komanso mtundu wotetezedwa wa k8s controller-ndege.
- Chowonjezera "--log-target" njira.
- A failsafe startup mode yawonjezedwa, yomwe imalola, pakakhala mavuto ndi malamulo otchulidwa, kubwereranso ku kasinthidwe kosasintha popanda kusiya wolandirayo osatetezedwa.
- Bash tsopano imathandizira kumaliza kwalamulo kuti mugwire ntchito ndi malamulo.
Source: opennet.ru