Hello. I'm new to Linux and right now I'm studying CentOS7.
I went to the stage of studying the firewall for corporate environment. And I realized that there is an iptables and Firewalld in the CentOS7.
I need advice, what kind of firewall to learn and so why? Please advise.
Firewalld or iptables
Re: Firewalld or iptables
In CentOS 7, firewalld is the default but iptables is still available and you can switch over from one to the other although they do not share rules so you would need to recreate them.
In the RHEL 8 beta that's been out for the last few months, firewalld is still default but there is no iptables support. Instead of iptables, the alternative to firewalld on el8 is nftables.
Many people hate firewalld with a passion. I am one of them. It installs a ridiculous ruleset by default that contains between 200 and 500 rules just to allow port 22 access. The way to manipulate its rules is using the firewall-cmd command and the man page for that is 1200 lines long, it has an arcane and confusing and convoluted command line syntax that appears to have no logic to it. I use iptables on CentOS 6 and 7 and if I use 8 I will be using nftables.
In the RHEL 8 beta that's been out for the last few months, firewalld is still default but there is no iptables support. Instead of iptables, the alternative to firewalld on el8 is nftables.
Many people hate firewalld with a passion. I am one of them. It installs a ridiculous ruleset by default that contains between 200 and 500 rules just to allow port 22 access. The way to manipulate its rules is using the firewall-cmd command and the man page for that is 1200 lines long, it has an arcane and confusing and convoluted command line syntax that appears to have no logic to it. I use iptables on CentOS 6 and 7 and if I use 8 I will be using nftables.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Re: Firewalld or iptables
Thanks for your replay!
Correctly, I realized that to work on CentOS 7 with iptables, I had to remove firewalld?
Correctly, I realized that to work on CentOS 7 with iptables, I had to remove firewalld?