FIREWALLD.CONF(5) firewalld.conf FIREWALLD.CONF(5) (NAME) firewalld.conf - firewalld (SYNOPSIS) /etc/firewalld/firewalld.conf (DESCRIPTION) firewalld.conf firewalld . firewalld . (OPTIONS) : DefaultZone NetworkManager init . public . MinimalMark . . (marks) . CleanupModulesOnExit yes true (unload) firewalld . no false . CleanupOnExit firewalld . no false . yes true . IPv6_rpfilter (RPF) IPv6 RFC 3704 . : - strict: <<>> RFC 3704 . ingress == egress . - loose: <<>> RFC 3704 . . - strict-forward: "loose" RPF (INPUT) . - loose-forward: "loose" RPF (INPUT) . - no: RPF . rp_filter IPv4 sysctl . : . . (fast path) . . . RPF (forwarded) . IndividualCalls ( ) -restore . . LogDenied () (reject) (drop) INPUT FORWARD OUTPUT reject drop . : all unicast broadcast multicast off. off . AutomaticHelpers . . FirewallBackend . : nftables () iptables. firewalld . (direct) (passthrough) iptables ip6tables ebtables . : iptables . . FlushAllOnReload (reload) . : . . "no" . "yes" . ReloadPolicy . (drop). INPUT FORWARD OUTPUT . "DROP" "REJECT" "ACCEPT" . "INPUT:REJECT,FORWARD:DROP,OUTPUT:ACCEPT". "INPUT:DROP,FORWARD:DROP,OUTPUT:DROP" . RFC3964_IPv4 RFC 3964 IPv6 6to4 IPv4 . "yes" . StrictForwardPorts yes NAT (DNAT) docker DNAT . firewalld firewalld . no ( ) firewalld . . "no" . AllowZoneDrifting . . NftablesFlowtable flowtable nftables (forwarded) . nftables . . : "eth0 eth1". "off" . NftablesCounters yes nftables . . "no" . NftablesTableOwner yes nftables firewalld . ( ) firewalld . firewalld "no" . "yes" . (SEE ALSO) firewall-applet(1), firewalld(1), firewall-cmd(1), firewall-config(1), firewalld.conf(5), firewalld.direct(5), firewalld.dbus(5), firewalld.icmptype(5), firewall-offline-cmd(1), firewalld.richlanguage(5), firewalld.service(5), firewalld.zone(5), firewalld.zones(5), firewalld.policy(5), firewalld.policies(5), firewalld.ipset(5), firewalld.helper(5) (NOTES) firewalld: http://firewalld.org (AUTHORS) Thomas Woerner Jiri Popelka Eric Garver firewalld 2.5.1 FIREWALLD.CONF(5)