How to implement TCP Wrappers user/group match in firewall rules?
Issue
- How to implement TCP Wrappers user/group match in firewall rules?
- Previously in RHEL, we used to use
/etc/hosts.allowand/etc/hosts.denyalong with Match User. How can we use this in combination with firewalld?
Environment
- Red Hat Enterprise Linux 7 and later
- iptables, firewalld, or nftables firewall
- Migrating from deprecated TCP Wrappers with username/UID or groupname/GID rules
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.