Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Kenneth Porter
On 10/25/2018 12:41 AM, Warren Young wrote: to make them permanent, you have to edit `/etc/sysconfig/iptables` with a somewhat different syntax. Or use "service iptables save". On systems where I use raw iptables, I set the thing up with the command line tools and then use that command to sn

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Warren Young
On Oct 25, 2018, at 9:04 AM, Valeri Galtsev wrote: > > suppose I made configuration of some machine, which then I am going to > replicate just by using kickstart when building new machines. What should I > add to kickstart configuration file to make my configured firewalld part > reproduced on

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Jonathan Billings
On Thu, Oct 25, 2018 at 09:53:13AM -0500, Blake Hudson wrote: > My first impression was that firewalld and NetworkManager had a more desktop > oriented/plug-n-play type feel compared to traditional tools like network > and iptables so I chose to stick with the latter on my servers (manual > IP4/IP

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Valeri Galtsev
On 10/25/18 2:41 AM, Warren Young wrote: On Oct 24, 2018, at 8:06 PM, Joel Freeman wrote: Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd --add

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Blake Hudson
Joel Freeman wrote on 10/24/2018 9:06 PM: On a similar note, Is there any reason to use Firewalld over IPTables? I'm incredibly new to Linux administration, and would like to your guys' opinions on it. Many thanks, Joel. My first impression was that firewalld and NetworkManager had a more

Re: [CentOS] Stupid C7 firewall question

2018-10-25 Thread Warren Young
On Oct 24, 2018, at 8:06 PM, Joel Freeman wrote: > > Is there any reason to use Firewalld over IPTables? Lots: https://firewalld.org/ > I'm incredibly new to Linux administration Given that, which would you rather type: $ sudo firewall-cmd --add-service=ftp or whatever that does under th