firewalld --add-rich-rule and established connections

Latest response

Hello,

is it possible to add a rich rule, in firewalld and have it affect existing/established conenctions too?

for example, in firewalld, I temporarily only want to allow one connection, for maintenance:
I do:

firewall-cmd --zone=public --add-source=192.168.1.112
firewall-cmd --zone=public --add-rich-rule='rule family="ipv4" source address="192.168.1.112" invert="True" drop'

I don't get any new connections anymore (except for 192.168.1.112), but existing ones still exist.

thanks,

Ron

Responses