FIREWALLD.POLICY-(5)     Firewalld Policy Set Gateway     FIREWALLD.POLICY-(5)

<?><?><?> (NAME)
       firewalld.policy-set-gateway - <?><?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?> (Gateway) <?><?><?><?> firewalld

<?><?><?><?><?><?><?> (DESCRIPTION)
   <?><?><?><?><?><?> <?><?><?><?><?>: <?><?><?><?><?> (Policy Set: Gateway)
       <?><?><?><?><?><?> <?><?><?><?><?> <?><?><?><?><?> (Gateway)
       <?><?><?><?> <?><?><?><?> <?><?><?><?><?> <?><?><?><?> <?><?>
       <?><?><?><?><?><?><?> <?><?><?><?><?> <?><?><?>. <?><?><?>
       <?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?> (masquerading)<?>
       <?><?><?><?><?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?>
       <?><?><?><?><?> (conntrack helpers) <?> <?><?><?><?><?><?><?><?><?><?>
       <?><?><?><?> <?><?><?><?><?><?><?><?> <?><?> <?><?><?><?>
       <?><?><?><?><?><?>.

       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?><?><?> <?><?>
       <?><?><?> <?><?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?>.
       <?><?><?><?><?><?><?> <?><?><?> <?><?><?><?><?><?><?> <?><?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?> <?><?><?>
       <?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?><?>
       <?><?><?><?><?><?><?>.

                       +-----------+                  +-----------+
                       |    LAN    |                  |   WORLD   |
                       |-----------|                  |-----------|
                       | zones:    |                  | zones:    |
                       |  internal |                  |  external |
                       |  home     |                  |  public   |
                       |  trusted  |                  |           |
                       +-----------+                  +-----------+
                             |                              |
                             |                              |
                             |         +-----------+        |
                             +---------|   HOST    |--------+
                                       |-----------|
                                       | zones:    |
                             +---------|  HOST     |--------+
                             |         +-----------+        |
                             |                              |
                             |                              |
                       +-----------+                  +-----------+
                       |   WORK    |                  |    DMZ    |
                       |-----------|                  |-----------|
                       | zones:    |                  | zones:    |
                       |  work     |                  |  dmz      |
                       +-----------+                  +-----------+


   <?><?><?><?><?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?><?><?>
       <?><?><?><?><?> (Policies in the Gateway set)
       gateway-dmz-to-HOST
           <?><?><?><?><?><?><?><?><?><?> <?><?> <?><?> <?><?><?><?><?><?><?>
           <?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?> <?><?><?><?>
           <?><?><?><?><?> (<?><?><?><?><?> dns <?> dhcp) <?><?><?><?>
           <?><?><?><?><?><?>.

           <?><?><?> <?><?><?><?><?><?>:
           /usr/lib/firewalld/policies/gateway-dmz-to-HOST.xml

       gateway-lan-to-work
           <?><?><?> <?><?><?><?><?><?> <?><?> <?><?> LAN <?><?> work
           <?><?><?><?> <?><?><?><?><?><?>. <?><?><?><?><?><?><?><?><?>
           <?><?><?><?><?> (masquerading) <?>
           <?><?><?><?><?><?><?><?><?><?><?><?><?> <?><?><?><?>
           <?><?><?><?><?><?> <?><?><?><?><?> <?><?> <?><?><?><?>
           <?><?><?><?><?><?><?>.

           <?><?><?> <?><?><?><?><?><?>:
           /usr/lib/firewalld/policies/gateway-lan-to-work.xml

       gateway-lan-to-world
           <?><?><?> <?><?><?><?><?><?> <?><?> <?><?> LAN <?><?> world
           <?><?><?><?> <?><?><?><?><?><?>. <?><?><?> <?><?> <?><?><?><?>
           <?><?><?><?> <?><?> <?><?><?><?><?> <<external>> <?><?><?><?><?><?>
           <?><?><?><?> <?><?><?><?><?><?> <?><?><?><?><?><?><?><?><?>
           (masquerade) <?><?><?><?><?> <?><?>. <?><?><?><?><?><?>
           <?><?><?><?><?><?><?><?><?><?><?><?><?> <?><?><?><?><?><?>
           <?><?><?><?><?> <?><?> <?><?><?><?> <?><?><?><?><?><?><?><?><?>
           <?><?><?><?> (<?><?><?><?><?> ftp) <?><?><?><?> <?><?><?><?><?><?>.

           <?><?><?> <?><?><?><?><?><?>:
           /usr/lib/firewalld/policies/gateway-lan-to-world.xml

       gateway-lan-to-HOST
           <?><?><?><?><?><?><?><?><?><?> <?><?> <?><?> <?><?><?><?><?><?><?>
           <?><?><?><?> <?><?> <?><?><?><?><?> <?><?><?><?> <?><?><?><?>
           <?><?><?><?><?> (<?><?><?><?><?> dns <?> dhcp) <?><?><?><?>
           <?><?><?><?><?><?>.

           <?><?><?> <?><?><?><?><?><?>:
           /usr/lib/firewalld/policies/gateway-lan-to-HOST.xml

       gateway-world-to-HOST
           <?><?><?><?><?><?><?> <?><?> <?><?> <?><?><?><?> <?><?>
           <?><?><?><?><?> <?><?><?><?> <?><?><?><?>
           <?><?><?><?><?><?><?><?><?> internal/dmz <?><?> world <?><?>
           <?><?><?><?><?><?> <?><?> <?><?><?><?> <?><?><?><?><?><?><?> <?><?>
           <?><?><?> <?><?><?><?><?> <?><?><?><?><?><?><?> <?><?><?>.

           <?><?> <?><?><?><?><?> <?><?><?><?><?> <?><?><?><?>
           <?><?><?><?><?><?> <?><?><?><?> <?><?><?><?><?><?><?>
           <?><?><?><?><?> <?><?><?> <?><?><?>. <?><?><?> <?><?><?><?>
           <?><?><?><?> 8080 <?><?> <?><?> 10.1.1.42:80 <?><?><?><?><?><?><?>
           <?><?><?><?><?><?>.

               # firewall-cmd --permanent --policy gateway-world-to-HOST \
                              --add-forward-port=port=8080:proto=tcp:toport=80:toaddr=10.1.1.42
               # firewall-cmd --reload


           <?><?><?> <?><?><?><?><?><?>:
           /usr/lib/firewalld/policies/gateway-world-to-HOST.xml

<?><?><?><?><?><?> <?><?><?><?><?><?> (SEE ALSO)
       firewall-applet(1), firewalld(1), firewall-cmd(1), firewall-config(1),
       firewalld.conf(5), firewalld.direct(5), firewalld.dbus(5),
       firewalld.icmptype(5), firewall-offline-cmd(1),
       firewalld.richlanguage(5), firewalld.service(5), firewalld.zone(5),
       firewalld.zones(5), firewalld.policy(5), firewalld.policies(5),
       firewalld.ipset(5), firewalld.helper(5)

<?><?><?><?> (NOTES)
       <?><?><?><?> <?><?><?><?> firewalld:
           http://firewalld.org

<?><?><?><?><?><?><?><?><?> (AUTHORS)
       Thomas Woerner <twoerner@redhat.com>
           <?><?><?><?><?><?><?><?><?><?><?>

       Jiri Popelka <jpopelka@redhat.com>
           <?><?><?><?><?><?><?><?><?><?><?>

       Eric Garver <eric@garver.life>
           <?><?><?><?><?><?><?><?><?><?><?>

firewalld 2.5.1                                           FIREWALLD.POLICY-(5)