Firewalls with firewalld

firewall-cmd --list-services

add service

  • until next reload

firewall-cmd --add-port=3306/tcp;

  • permanently

firewall-cmd --permanent --add-service=http

Close service

firewall-cmd --remove-port=3306/tcp;

Examples: mysql

firewall-cmd --permanent --zone=trusted --add-port=3306/tcp

reload

firewall-cmd --reload

Installation

fedora

dnf install firewalld

Start firewalld:

$ sudo systemctl unmask firewalld

$ sudo systemctl start firewalld

To make firewalld start automatically at system start:

$ sudo systemctl enable firewalld