☰

Firewalld가 활성 영역을 인쇄하지 않습니다

tag-icon • tag-icon firewall firewalld
Firewalld가 활성 영역을 인쇄하지 않습니다

박스 위에 vagrant Ubuntu 18.04.02:

root@ubuntu-bionic:~# firewall-cmd --get-active-zones 
root@ubuntu-bionic:~# firewall-cmd --list-all
public
  target: default
  icmp-block-inversion: no
  interfaces: 
  sources: 
  services: ssh dhcpv6-client
  ports: 4444/tcp 5555/tcp
  protocols: 
  masquerade: yes
  forward-ports: port=80:proto=tcp:toport=12345:toaddr=
    port=80:proto=tcp:toport=12345:toaddr=192.168.1.6
  source-ports: 
  icmp-blocks: 
  rich rules:

firewall-cmd활성 영역을 반환 하지 않는 이유는 무엇입니까 ?

root@ubuntu-bionic:~# systemctl status firewalld.service 
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Sun 2019-05-05 11:22:56 UTC; 39min ago
     Docs: man:firewalld(1)
 Main PID: 791 (firewalld)
    Tasks: 2 (limit: 1152)
   CGroup: /system.slice/firewalld.service
           └─791 /usr/bin/python3 -Es /usr/sbin/firewalld --nofork --nopid

답변1

Zone 개념을 보면 특정 인터페이스에 바인딩되어 사용되는 소스 IP를 특정 Zone에 추가 active해야 합니다 (후자가 하나가 되려면 ).firewalldactive

내용은 이렇습니다

root@ubuntu-bionic:~# ip -4 addr show enp0s8
3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    inet 192.168.33.10/24 brd 192.168.33.255 scope global enp0s8
       valid_lft forever preferred_lft forever

root@ubuntu-bionic:~# firewall-cmd --zone=public --add-source=192.168.33.10 --permanent
success
root@ubuntu-bionic:~# firewall-cmd --zone=public --add-source=192.168.33.10 
success
root@ubuntu-bionic:~# firewall-cmd --reload
success

지금...

root@ubuntu-bionic:~# firewall-cmd --get-active-zones 
public
  sources: 192.168.33.10

관련 정보