Firewalld or iptables

General support questions
Post Reply
stum74
Posts: 6
Joined: 2019/04/18 13:23:51

Firewalld or iptables

Post by stum74 » 2019/04/18 13:34:17

Hello. I'm new to Linux and right now I'm studying CentOS7.
I went to the stage of studying the firewall for corporate environment. And I realized that there is an iptables and Firewalld in the CentOS7.
I need advice, what kind of firewall to learn and so why? Please advise.

User avatar
TrevorH
Forum Moderator
Posts: 29490
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Firewalld or iptables

Post by TrevorH » 2019/04/18 13:43:02

In CentOS 7, firewalld is the default but iptables is still available and you can switch over from one to the other although they do not share rules so you would need to recreate them.

In the RHEL 8 beta that's been out for the last few months, firewalld is still default but there is no iptables support. Instead of iptables, the alternative to firewalld on el8 is nftables.

Many people hate firewalld with a passion. I am one of them. It installs a ridiculous ruleset by default that contains between 200 and 500 rules just to allow port 22 access. The way to manipulate its rules is using the firewall-cmd command and the man page for that is 1200 lines long, it has an arcane and confusing and convoluted command line syntax that appears to have no logic to it. I use iptables on CentOS 6 and 7 and if I use 8 I will be using nftables.
CentOS 6 will die in November 2020 - migrate sooner rather than later!
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 is dead, do not use it.
Full time Geek, part time moderator. Use the FAQ Luke

stum74
Posts: 6
Joined: 2019/04/18 13:23:51

Re: Firewalld or iptables

Post by stum74 » 2019/04/19 06:15:05

Thanks for your replay!
Correctly, I realized that to work on CentOS 7 with iptables, I had to remove firewalld?

Post Reply

Return to “CentOS 7 - General Support”