Is there an easy way to reject all connections at the end of zone

Solution Unverified - Updated -

Issue

  • Is there an easy way to reject all connections at the end of zone?
  • I tried it with the following some rich rules:
    example
    interfaces:
    sources: 192.168.0.11
    services:
    ports: 8080/tcp
    masquerade: no
    forward-ports:
    icmp-blocks:
    rich rules:
    rule family="ipv4" port port="1-8079" protocol="tcp" reject
    rule family="ipv4" port port="1-65535" protocol="udp" reject
    rule family="ipv4" port port="8089-65535" protocol="tcp" reject

Environment

  • Red Hat Enterprise Linux 7
  • firewalld

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content