system-config-firewall, replacement?

Support for security such as Firewalls and securing linux
AStaleyUK
Posts: 3
Joined: 2014/07/09 11:47:52

system-config-firewall, replacement?

Post by AStaleyUK » 2014/07/09 12:07:28

I've just completed a fresh install of CentOS7 to do some testing with native PostgreSQL and one of the things I've done in the past is install "system-config-firewall" to allow me to easily setup the firewall and allow ports. CentOS7 will allow me to install this via yum but when I run the command it tells me "ERROR: FirewallD is active, please use firewall-cmd.". I'm not familiar with firewall-cmd, is there something available with a user interface of some description. CentOS7 is setup command line only, but with system-config-firewall it at least gave you an ASCI output to work with.

Thanks in advance.

AStaleyUK
Posts: 3
Joined: 2014/07/09 11:47:52

Re: system-config-firewall, replacement?

Post by AStaleyUK » 2014/07/10 15:42:21

Having looked around I've come to the conclusion that such a program doesn't currently exist for CentOS7 (hadn't realised how recently it had been released). I came across https://fedoraproject.org/wiki/FirewallD which looks to give a good explanation of FirewallD, from this I've been able to setup a Zone with the access I need and assign it to the network interface.

drk
Posts: 397
Joined: 2014/01/30 20:38:28

Re: system-config-firewall, replacement?

Post by drk » 2014/07/10 15:56:36

This https://access.redhat.com/documentation ... walls.html describes how to switch back to system-config-firewall if you want. I'd spend the time to figure out the firewalld stuff though.

User avatar
Super Jamie
Posts: 310
Joined: 2014/01/10 23:44:51

Re: system-config-firewall, replacement?

Post by Super Jamie » 2014/07/11 00:07:14

It's called firewall-config, it's in the menu under Firewall

User avatar
TrevorH
Forum Moderator
Posts: 26525
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: system-config-firewall, replacement?

Post by TrevorH » 2014/07/11 00:34:47

firewall-config is GUI only though and the OP is looking for an ncurses type program
CentOS 5 died in March 2017 - migrate NOW!
CentOS 6 goes EOL sooner rather than later, get upgrading!
Full time Geek, part time moderator. Use the FAQ Luke

User avatar
Super Jamie
Posts: 310
Joined: 2014/01/10 23:44:51

Re: system-config-firewall, replacement?

Post by Super Jamie » 2014/07/11 00:42:17

Ohhh I see.

There is no ncurses equivalent, however man firewall-cmd explans the commandline app well, and it's really good once you learn to use it.

screwballl
Posts: 8
Joined: 2014/07/18 18:45:53

Re: system-config-firewall, replacement?

Post by screwballl » 2014/07/18 20:07:41

Some people do not want to use the new tools when the old ones work very well.

So disable firewalld

yum install iptables-services

add the rules and then

service iptables start

I can understand when there are specialized specific uses for firewalld, but to force it on everyone by default is less than desired.... With the ease of iptables blocking everything except what you want, most of us want and need and use iptables. No need to learn zones or another 5000 lines of code, just to learn how to enter a simple command.

Of course with CentOS being taken over by RH instead of just being a distro based on it, we can expect a lot more of these types of events over the next few years.

User avatar
TrevorH
Forum Moderator
Posts: 26525
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: system-config-firewall, replacement?

Post by TrevorH » 2014/07/18 20:09:34

Of course with CentOS being taken over by RH instead of just being a distro based on it, we can expect a lot more of these types of events over the next few years.
CentOS has always reproduced what upstream produces with the only changes made being to remove branding and copyright materials.
CentOS 5 died in March 2017 - migrate NOW!
CentOS 6 goes EOL sooner rather than later, get upgrading!
Full time Geek, part time moderator. Use the FAQ Luke

screwballl
Posts: 8
Joined: 2014/07/18 18:45:53

Re: system-config-firewall, replacement?

Post by screwballl » 2014/07/18 20:24:22

TrevorH wrote:
Of course with CentOS being taken over by RH instead of just being a distro based on it, we can expect a lot more of these types of events over the next few years.
CentOS has always reproduced what upstream produces with the only changes made being to remove branding and copyright materials.

True, but now CentOS is being bought out and run by RH, not just a fork or tree based on RH but with its own flavor.

User avatar
vonskippy
Posts: 839
Joined: 2006/12/30 03:00:04
Location: Western Slope Colorado

Re: system-config-firewall, replacement?

Post by vonskippy » 2014/07/18 21:11:25

screwballl wrote:True, but now CentOS is being bought out and run by RH, not just a fork or tree based on RH but with its own flavor.
No and No, what part of BINARY CLONE is unclear to you?

It's not a fork.

It's not "based" on a tree.

It's an EXACT CLONE minus the branding.
For the 2.5^15th time :: Better Details = Better Answers

Post Reply

Return to “CentOS 7 - Security Support”