CentOS Stream 9: Firewall

step-1

Configure Firewall and SELinux

To Configure Firewall and SELinux on CentOS Stream Server, Configure like follows.

Initial Settings Firewall

Step [1] It's possible to display FireWall Service Status like follows. (enabled by default)


[root@bizantum ~]# systemctl status firewalld
*  firewalld.service - firewalld - dynamic firewall daemon
     Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor>
     Active: active (running) since Fri 2021-11-25 20:29:20 JST; 5min ago
       Docs: man:firewalld(1)
   Main PID: 710 (firewalld)
      Tasks: 2 (limit: 4419)
     Memory: 41.6M
        CPU: 427ms
     CGroup: /system.slice/firewalld.service
             +- 710 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid

# [Active: active (running) ***] means firewalld is running now

Step [2] If you use FireWall service, it needs to modify FireWall settings manually because incoming requests for services are mostly not allowed by default. Refer to here for basic Firewall operation and settings. Configuration examples of CentOS Stream 9 on this site are based on the environment Firewalld service is always enabled.

Step [3] If you don't need FireWall service because of some reasons like that some FireWall Machines are running in your Local Netowrk or others, it's possible to stop and disable FireWall service on CentOS Stream server like follows.


# stop service
[root@bizantum ~]# systemctl stop firewalld
# disable service
[root@bizantum ~]# systemctl disable firewalld
Removed /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.

Initial Settings SELinux

Step [4] It's possible to display current SELinux (Security-Enhanced Linux) Status like follows. (enabled by default)


[root@bizantum ~]# getenforce
Enforcing     # SELinux is enabled

Step [5] If you enable SELinux, there are cases to modify SELinux policies manually because sometimes SELinux stops applications. Refer to here for basic SELinux operation and settings. Configuration examples of CentOS Stream 9 on this site are based on the environment SELinux is always Enforcing.


[root@bizantum ~]# useradd centos
[root@bizantum ~]# passwd centos
Changing password for user centos.
New UNIX password:              # input any password you'd like to set
Retype new UNIX password:       # confirm
passwd: all authentication tokens updated successfully.

Step [6] If you don't need SELinux feature because of some reasons like that your server is running only in Local safety Network or others, it's possible to disable SELinux like follows.


# disable SELinux
[root@bizantum ~]# grubby --update-kernel ALL --args selinux=0
# apply changes to restart computer
[root@bizantum ~]# reboot
# if falling back to enable, run like follows
[root@bizantum ~]# grubby --update-kernel ALL --remove-args selinux

Comments

Popular posts from this blog

Cyber Security: ISO 27001 Overview
Introduction ISO 27001 is an international standard for information security management systems (ISMS). It provides a framework for managing sensitive company information to ensure it remains secure. Understanding ISO 27001 is crucial for organizations aiming to protect their information assets.
Comprehensive Guide to Windows Subsystem for Linux (WSL): Benefits, Setup, and Usage
Introduction Windows Subsystem for Linux (WSL) is a compatibility layer for running Linux binary executables natively on Windows 10, Windows 11, and Windows Server. It allows users to run a GNU/Linux environment directly on Windows, including most command-line tools, utilities, and applications.
Ultimate Guide to COBIT: Framework, Benefits, Implementation, and Impact
Introduction COBIT (Control Objectives for Information and Related Technologies) is a globally recognized framework for managing and governing enterprise IT. It provides comprehensive guidelines for organizations to achieve their objectives through the effective use of IT.
Understanding ISO/IEC 20000: A Comprehensive Guide to IT Service Management
Introduction ISO/IEC 20000 is an international standard for IT Service Management (ITSM). It provides a framework for managing and delivering IT services that meet business needs and customer requirements. The standard ensures consistent and high-quality IT service delivery through a set of processes and best practices.
Top SEO Tools for Digital Marketing: A Comprehensive Guide
Introduction In today's digital landscape, search engine optimization (SEO) is a critical component for any business looking to enhance its online presence and drive organic traffic. With the myriad of SEO tools available, navigating the digital marketing space can seem daunting. To streamline your efforts and achieve optimal results, it's essential to leverage the right tools that cater to your specific needs.
Debian 12 Bookworm: Install Kubeadm
Introduction In this article, we will explore the what, who, where, when, why, and how of Kubeadm functionality on the Debian 12 Bookworm platform, so let's get started.