Cockpit on CentOS Stream 9: Enable, Restrict, Verify
Install Cockpit on CentOS Stream 9, restrict port 9090 to trusted sources, and verify the socket before opening the console.
Loading…
ReadMeFeed / Community knowledge
#firewalld
Real questions. Useful conversations. Find the people who know your stack.
centosChoosing Between firewalld and nftables in RHEL 9
Deciding between firewalld and nftables in RHEL 9? Learn when to use the default dynamic manager versus raw kernel rules for performance and control.
redhatEnforcing Host Firewall Policy Across a RHEL Fleet with the Firewall System Role
Use the Red Hat firewall system role to define host packet filtering once in Ansible and enforce it consistently across RHEL 8/9 fleets. Covers minimal design, trust boundaries, and failure modes.
ansibleUsing firewalld Zones and Rich Rules to Secure a Web Server on CentOS 7
Learn how to use firewalld zones and rich rules on CentOS 7 to allow HTTP only from a trusted subnet, test with time‑out rules, and make the changes permanent.
Designing Minimal Secure Network Segmentation on CentOS Stream 9 with Firewalld Zones
Build a lean, secure multi‑tier network on CentOS Stream 9 by assigning each tier’s NIC to a firewalld zone, using rich rules and service filtering. The guide covers requirements, design, trust boundaries, checks, failure modes, and redesign triggers.
Diagnosing firewalld Start Failures on Rocky Linux 9
Step-by-step diagnostic guide for firewalld start failures on Rocky Linux 9, covering XML syntax errors, legacy service conflicts, permission issues, missing zones, and kernel module mismatches with concrete commands and verification steps.
rockylinuxManaging Network Access in CentOS with Firewalld Zones
Learn how to manage network traffic in CentOS using Firewalld zones, including the critical difference between runtime and permanent rules to prevent configuration loss.
firewalld nf_conntrack_max Static Default Lacks Runtime Scaling on openSUSE
Missing Dynamic Adjustment for Connection Tracking Table openSUSE Leap and Tumbleweed ship firewalld as the default firewall manager, which relies on the kernel's nf_conntrack subsystem. The parameter nf_conntrack_max is calculated once at boot from MemTotal (typically 65,536 entries per GB of RAM) and never adjusted afterward. High-concurrency workloads—dat
opensuseFedora Workstation firewall zone defaults: which inbound ports should stay open across releases?
Fedora Workstation ships with firewalld enabled and a default zone (historically named FedoraWorkstation ) that blocks unsolicited inbound traffic, yet has also allowed certain discovery-related ports such as mDNS and Samba client ranges. That choice sits between a fully closed inbound firewall and usability features like network discovery and media sharing,
fedora