Re: [CentOS] firewall help request (solved)

2020-06-16 Thread Simon Matter via CentOS
> At 03:47 PM 6/16/2020, Kenneth Porter wrote: >>The rule is in the wrong chain. The INPUT chain affects packets that >>terminate at the same machine. You want to block packets that will >>be passed on to the Internet, so your rule needs to be in the >>FORWARD chain. (The OUTPUT chain affects packe

Re: [CentOS] firewall help request (solved)

2020-06-16 Thread Kenneth Porter
--On Tuesday, June 16, 2020 5:20 PM -0700 david wrote: If someone can suggest a firewall-cmd equivalent, it would be nice. Alas, firewalld is targeted at end nodes and doesn't really provide much facility for routers. Its big advantage there is in setting up a reasonable default firewall fo

Re: [CentOS] firewall help request (solved)

2020-06-16 Thread david
At 03:47 PM 6/16/2020, Kenneth Porter wrote: The rule is in the wrong chain. The INPUT chain affects packets that terminate at the same machine. You want to block packets that will be passed on to the Internet, so your rule needs to be in the FORWARD chain. (The OUTPUT chain affects packets tha