Re: [CentOS] firewalld management on a headless server

2017-03-31 Thread James Hogarth
On 30 March 2017 at 19:47, Mark Milhollan wrote: > On Wed, 29 Mar 2017, Robert Moskowitz wrote: >>On 03/29/2017 07:38 AM, Leon Fauster wrote: > >>>We have good results with http://www.shorewall.net/ an iptables >>>"abstraction". >>>Despite its not a GUI, the streamlined configuration helps to be e

Re: [CentOS] firewalld management on a headless server

2017-03-30 Thread Mark Milhollan
On Wed, 29 Mar 2017, Robert Moskowitz wrote: >On 03/29/2017 07:38 AM, Leon Fauster wrote: >>We have good results with http://www.shorewall.net/ an iptables >>"abstraction". >>Despite its not a GUI, the streamlined configuration helps to be effective. > >From what I can determine, it is still iptab

Re: [CentOS] firewalld management on a headless server

2017-03-29 Thread Robert Moskowitz
On 03/29/2017 07:38 AM, Leon Fauster wrote: Am 27.03.2017 um 21:03 schrieb Robert Moskowitz : Is there an Apache tool to manage firewalld on a headless server? I am looking forward to my next Centos project which is to replace my Juniper SSG5 firewall... And along that line, what overlap, i

Re: [CentOS] firewalld management on a headless server

2017-03-29 Thread Leon Fauster
Am 27.03.2017 um 21:03 schrieb Robert Moskowitz : > > Is there an Apache tool to manage firewalld on a headless server? > > I am looking forward to my next Centos project which is to replace my Juniper > SSG5 firewall... > > And along that line, what overlap, if any between firewalld and Surica

Re: [CentOS] firewalld management on a headless server

2017-03-28 Thread m . roth
James B. Byrne wrote: > > On Mon, March 27, 2017 17:31, m.r...@5-cent.us wrote: >> Mike wrote: >>> Nice catch, Mr. Schumacher ---> The following modules are included as standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz Configure a Linux firewall using FirewallD, by editing allowed

Re: [CentOS] firewalld management on a headless server

2017-03-28 Thread James B. Byrne
On Mon, March 27, 2017 17:31, m.r...@5-cent.us wrote: > Mike wrote: >> Nice catch, Mr. Schumacher ---> The following modules are included >> as >> standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz >> Configure a Linux firewall using FirewallD, by editing allowed >> services and po

Re: [CentOS] firewalld management on a headless server

2017-03-28 Thread Sorin Srbu
> -Original Message- > From: CentOS [mailto:centos-boun...@centos.org] On Behalf Of John R Pierce > Sent: den 28 mars 2017 09:28 > To: centos@centos.org > Subject: Re: [CentOS] firewalld management on a headless server > > On 3/27/2017 10:20 PM, Sorin Srbu wrote:

Re: [CentOS] firewalld management on a headless server

2017-03-28 Thread John R Pierce
On 3/27/2017 10:20 PM, Sorin Srbu wrote: That reminded me about Smoothwall I used to use a few years back. Wasn't pfsense related to Smoothwall, maybe even a fork? smoothwall is linux based. m0n0wall was a BSD firewall that pfSense forked from back in 2004. -- john r pierce, recycling bit

Re: [CentOS] firewalld management on a headless server

2017-03-28 Thread Sorin Srbu
> -Original Message- > From: CentOS [mailto:centos-boun...@centos.org] On Behalf Of Valeri > Galtsev > Sent: den 27 mars 2017 23:43 > To: CentOS mailing list > Subject: Re: [CentOS] firewalld management on a headless server > > > On Mon, March 27, 2017 3:58

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Robert Moskowitz
On 03/27/2017 09:23 PM, Mike wrote: Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? mark Ahh, I did not know of this. Well, I'm back to suggesting OP take a little time and get comfortable with firewall-cmd in the te

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
Webmin used to be considered insecure, and people would scream and yell if you suggested using it. Has that changed? mark Ahh, I did not know of this. Well, I'm back to suggesting OP take a little time and get comfortable with firewall-cmd in the terminal. If we want our solid redhat clone

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Ned Slider
On 27/03/17 22:43, Valeri Galtsev wrote: On Mon, March 27, 2017 3:58 pm, Mike wrote: I don't think it's going to give you a web-based firewall configuration tool. Firewall/router system I use is pfSense: https://pfsense.org/ It has nice web interface for configuration of everything, based o

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Gordon Messmer
On 03/27/2017 02:31 PM, m.r...@5-cent.us wrote: Has that changed? That answer is probably subjective. I'll probably never trust it, but the number of recent known critical exploits isn't as high as it used to be: https://www.cvedetails.com/vulnerability-list/vendor_id-358/Webmin.html

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Valeri Galtsev
On Mon, March 27, 2017 3:58 pm, Mike wrote: > I don't think it's going to give you a web-based firewall configuration > tool. Firewall/router system I use is pfSense: https://pfsense.org/ It has nice web interface for configuration of everything, based on FreeBSD (very slim, lightweight, small

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread m . roth
Mike wrote: > Nice catch, Mr. Schumacher ---> The following modules are included as > standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz > Configure a Linux firewall using FirewallD, by editing allowed > services and ports. > > This is likely the right tool for the job. > Webmin use

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
yum (CentOS/RedHat/Fedora) By adding the Webmin repository and Jamie Cameron's key, it is possible to install & maintain the latest Webmin/Usermin versions. The following will install the latest Webmin version by adding the webmin-repo and corresponding GPG key. Yum will resolve all the necessary

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
Nice catch, Mr. Schumacher ---> The following modules are included as standard with release 1.831 of Webmin. FirewallD firewalld.wbm.gz Configure a Linux firewall using FirewallD, by editing allowed services and ports. This is likely the right tool for the job. On Mon, Mar 27, 2017 at 5:00 PM, M

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Michael Schumacher
Hi, > I recently converted my employer's firewall from pure iptabes to > firewalld and looked for something similar, more along the lines of > webmin, etc. funny, my webmin installation on a banana-pi has webmin 1.831, which has support for firewalld. I am not sure, but I believe I got it direct

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
I don't think it's going to give you a web-based firewall configuration tool. It does allow you to control/configure networking hardware and devices via NetworkManager, but I don't believe it goes further than that for networking. Ironically, it does provide a an ssh-like session terminal where you

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Robert Moskowitz
On 03/27/2017 03:24 PM, Mike wrote: I recently converted my employer's firewall from pure iptabes to firewalld and looked for something similar, more along the lines of webmin, etc. I didn't find anything close to a match. In the end, it all came down to getting comfortable with "firewall-cmd"

Re: [CentOS] firewalld management on a headless server

2017-03-27 Thread Mike
I recently converted my employer's firewall from pure iptabes to firewalld and looked for something similar, more along the lines of webmin, etc. I didn't find anything close to a match. In the end, it all came down to getting comfortable with "firewall-cmd" in the shell. Haven't used suricata, so