Ho lokolloa ha firewall firewalld 1.2 e laoloang ka matla e hatisitsoe, e kenngoe tšebetsong ka mokhoa oa sephutheloana holim'a li-filters tsa pakete tsa nftables le iptables. Firewalld e sebetsa e le ts'ebetso ea morao-rao e u lumellang hore u fetole melao ea filthara ea pakete ka D-Bus ntle le ho kenya melao ea sefahla sa pakete kapa ho tlola likhokahano tse thehiloeng. Morero o se o ntse o sebelisoa liphaellong tse ngata tsa Linux, ho kenyelletsa RHEL 7+, Fedora 18+ le SUSE/openSUSE 15+. Khoutu ea firewalld e ngotsoe ka Python mme e na le laesense tlasa laesense ea GPLv2.
Ho laola firewall, ho sebelisoa firewall-cmd utility, eo, ha ho etsoa melao, e sa thehoang ho liaterese tsa IP, marang-rang a marang-rang le linomoro tsa li-port, empa ka mabitso a litšebeletso (mohlala, ho bula monyetla oa ho fumana SSH eo u lokelang ho e etsa. matha "firewall-cmd -eketsa -service= ssh", ho koala SSH - "firewall-cmd -remove -service=ssh"). Ho fetola tlhophiso ea li-firewall, sebopeho sa setšoantšo sa firewall-config (GTK) le applet ea firewall-applet (Qt) le tsona li ka sebelisoa. Tšehetso bakeng sa tsamaiso ea firewall ka D-BUS API firewalld e fumaneha mererong e kang NetworkManager, libvirt, podman, docker le fail2ban.
Liphetoho tse kholo:
- Litšebeletso tsa snmptls le snmptls-trap li kentsoe tšebetsong ho sebetsana le phihlello ea protocol ea SNMP ka mocha o sireletsehileng oa puisano.
- Ts'ebeletso e kentsoe ts'ebetsong e ts'ehetsang protocol e sebelisoang tsamaisong ea faele ea IPFS.
- Litšebeletso tse ekelitsoeng ka tšehetso ea gpsd, ident, ps3netsrv, CrateDB, checkmk, netdata, Kodi JSON-RPC, EventServer, Prometheus node-exporter, kubelet-readonly, hammoho le phetolelo e sireletsehileng ea k8s controller-plane.
- E kenyellelitsoe "--log-target" kgetho.
- Ho ekelitsoe mokhoa oa ho qala oa failsafe, o lumellang, haeba ho e-na le mathata ka melao e boletsoeng, ho khutlela ho tlhophiso ea kamehla ntle le ho siea moamoheli a sa sireletseha.
- Bash joale e ts'ehetsa ho phetheloa ha taelo ea ho sebetsa ka melao.
Source: opennet.ru