Firewalld Demo WalkThru

Minimum VM: 1vCPU x 1G mem, running RHEL 7.latest, RHEL 8.latest, or RHEL 9.latest

Setup via firewalld-setup.sh
- Installs & starts Apache
- Will need root or sudo to install packages
View current firewall config
- Note the zone currently active
- Also any services or ports currently open

      # firewall-cmd --state
      # firewall-cmd --list-all

      # firewall-cmd --add-service=http --permanent
      # firewall-cmd --reload

Try http://demo-vm again
- This should work, you should see Red Hat default apache start page
Scenario: remote system that you don't have easy access to, so making a mistake with the firewall config could lead to a RGE (Resume Generating Event)
- Use the --timeout parameter to revert changes
```
      # firewall-cmd --add-service=ftp --timeout=30s
      # firewall-cmd --list-all
```
- After timeout value, config returns to previous state
- Wait 30s and issue last command again
Disable all network traffic (e.g. suspected breach or attack)
- Warning: your session will lock up immediately! Make sure you have console access to the test system!
- Issue the following command from a SSH session, again make sure you can access the system console, your SSH session will lock up.
```
      # firewall-cmd --panic-on
```
- Now login to the VM console. Trying pinging the local gateway. No traffic is allowed in or out!
- Re-enable with the following command. Your SSH session should un-freeze.
```
      # firewall-cmd --panic-off
```

Other Examples

      # firewall-cmd --add-port=8080/tcp --permanent

      # firewall-cmd --get-services

      # firewall-cmd --info-service=RH-Satellite-6

      # firewall-cmd --runtime-to-permanent

Provide feedback