Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Sat Jul 12, 2014 6:04 am 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
Hi,
as far as I know, firewalld adds the possibility to use dynamic rules instead of the static one offered by the classic iptables.

The question is.
Does dynamic rules have sense on a server?
The server is connected always to the same net, what is the benefit of having dynamic rules on a server?
What is the sense of zones on a servr?


Top
   
PostPosted: Sun Jul 13, 2014 5:54 pm 
Offline
Senior Member

Joined: Fri Jul 03, 2009 2:31 am
Posts: 54
ICQ: 897607
iptables is dynamic. It would be useless otherwise. fail2ban, denyhosts, port knocking etc. all work by dynamically inserting rules into iptables.

I don't know anything about firewalld, so can't answer your question about zones.


Top
   
PostPosted: Sun Jul 13, 2014 6:12 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
Ox- wrote:
iptables is dynamic. It would be useless otherwise. fail2ban, denyhosts, port knocking etc. all work by dynamically inserting rules into iptables.

I don't know anything about firewalld, so can't answer your question about zones.


Iptables does not provide dynamic rules. Firewalld yes.
The software you mentioned add rules to iptables dynamically but this does not mean that iptables rules are dynamic.

Hope to see someone who can answer my question anyway :)


Top
   
PostPosted: Sun Jul 13, 2014 6:22 pm 
Offline
Senior Member

Joined: Mon Jul 05, 2010 5:13 pm
Posts: 392
... You realize that firewalld is just a layer over iptables, right? It is providing "dynamic" changes the same way that fail2ban, fwknop, and any other iptables-wrapper does.

- Les


Top
   
PostPosted: Sun Jul 13, 2014 6:24 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
akerl wrote:
... You realize that firewalld is just a layer over iptables, right? It is providing "dynamic" changes the same way that fail2ban, fwknop, and any other iptables-wrapper does.

- Les


I know it perfectly, but what is the sense of zones on a server?


Top
   
PostPosted: Sun Jul 13, 2014 6:31 pm 
Offline
Senior Member

Joined: Mon Jul 05, 2010 5:13 pm
Posts: 392
sblantipodi wrote:
but what is the sense of zones on a server?


Purple? Your question isn't very clear.


Top
   
PostPosted: Sun Jul 13, 2014 6:34 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
akerl wrote:
sblantipodi wrote:
but what is the sense of zones on a server?


Purple? Your question isn't very clear.


Give me a real life reason why a person should learn about zones.
What is the real life improvement they brings on a server over the old iptables "way"?

I think that zones are cool on desktop but a no sense on servers.
Am I wrong?
If yes, please try to explain me why.

Thanks.


Top
   
PostPosted: Sun Jul 13, 2014 6:40 pm 
Offline
Senior Member

Joined: Mon Jul 05, 2010 5:13 pm
Posts: 392
Computers talk to things. Servers are computers. Sometimes you want to control which services on which servers can talk to which other servers.

Since you don't want to write out a huge spec of firewall rules, you classify things into groups so you can apply rules on groups all at once. You don't like the word "group" because you were once attacked by a group of chickens after poking one with your sword, so you name your classifications "zones".

If you want to know the things you can do with iptables directly: http://man.cx/iptables
If you want to know the things you can do with firewalld: https://fedoraproject.org/wiki/FirewallD

Feel free to compare/contrast them.

- Les


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group