Block all incoming connections vi firewalld.

[hack3rcon]

Hello,
I want to block all incoming connections via firewalld. I want my server can see the internet(outbound) but all incoming connections blocked.
my current configuration is:

Code: Select all

$ sudo firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens192
  sources: 
  services: cockpit dhcpv6-client ssh
  ports: 80/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

Thank you.

[jlehtone]

You use zone 'public'. Use zone 'block'.

[hack3rcon]

Thank you.
Which "zone" is good for a web server?

[jlehtone]

A zone that is configured to do exactly what it needs to do.

I don't recall any of the provided zones being for "web server".
You either modify existing zone or create a new one.
For example, take the block zone and add the https service to that zone.
Or something like that.