iw/servercode
1
0 Fork 0
mirror of https://github.com/IntenseWebs/servercode.git synced 2026-11-04 21:27:20 -06:00
Code Issues Packages Projects Releases Wiki Activity

Updated debian networking & firewalld files

Browse Source
This commit is contained in:
IntenseWebs committed 2026-09-18 03:27:43 -05:00
1 parent edb4924207
commit a219f7ce92
2 files changed
+25 -20
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

02-ssh-help.txt
+2 -2
View File
@@ -44,8 +44,8 @@ cd /etc/ssh
vi /etc/ssh/sshd_config
PasswordAuthentication no
PermitRootLogin no
[Socket]
SocketProtocol=mptcp
# [Socket]
# SocketProtocol=mptcp
systemctl restart sshd
----------------------------------------------------------
03-firewalld.txt
+23 -18
View File
@@ -1,34 +1,39 @@
sudo apt update
sudo apt install firewalld
sudo systemctl enable firewalld
sudo apt install firewall-config
sudo apt install system-config-firewall-tui
su -
apt update
apt install firewalld
systemctl enable firewalld
apt install firewall-config
apt install system-config-firewall-tui
sudo systemctl stop firewalld.service
sudo systemctl disable firewalld.service
systemctl stop firewalld.service
systemctl disable firewalld.service
apt policy firewalld
firewall-cmd --permanent --add-port=80/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --permanent --add-source=192.168.1.0/24
firewall-cmd --add-service=ssh --permanent
systemctl enable firewalld
firewall-cmd --reload
sudo firewall-cmd --state
systemctl status firewalld
firewall-cmd --state
firewall-cmd --list-services
firewall-cmd --list-all
#VNC
sudo firewall-cmd --zone=public --add-port 5901/tcp --permanent
sudo firewall-cmd --zone=public --add-service=vnc-server --permanent
sudo firewall-cmd --zone=public --add-source=192.168.1.0/24
sudo firewall-cmd --reload
# VNC
# sudo firewall-cmd --zone=public --add-port 5901/tcp --permanent
# sudo firewall-cmd --zone=public --add-service=vnc-server --permanent
# sudo firewall-cmd --zone=public --add-source=192.168.1.0/24
# sudo firewall-cmd --reload
firewall-cmd --permanent --add-service=vnc-server
firewall-cmd --reload
sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent
# firewall-cmd --permanent --add-service=vnc-server
# firewall-cmd --reload
# sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent
firewall-cmd --get-active-zones
firewall-cmd --zone=public --list-all
firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop'
firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept'
# firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop'
# firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept'
firewall-cmd --zone=internal --add-source=192.168.1.0/24
firewall-cmd --zone=public --remove-service=ssh
firewall-cmd --zone=public --remove-service=dhcpv6-client