Centos 7 firewalld

Egorkkk · 03-27-2018, 03:57 AM

Hello!

I want to block all outgoing DNS queries to 53 port, except for DNS queries to one specific IP of DNS server.

I think it should be a rich rule for firewalld but don't know how to write it correctly.

Only firewalld, not iptables, because all other firewall rules works fine.

Thank you.

tshikose · 03-27-2018, 04:19 AM

man 5 firewalld.richlanguage

Egorkkk · 03-27-2018, 04:40 AM

Quote:

Originally Posted by tshikose

man 5 firewalld.richlanguage

Man is very good thing, of course. And i read it, but...

But little example can be much more useful for me.
Thank you )

tshikose · 03-27-2018, 05:06 AM

Try the command below.
I did not test.
So please be sure of what you do.

Code:

firewall-cmd --add-rich-rule='rule family="ipv4" destination not address="8.8.8.8" port port="53" protocol="udp" reject'