If so, how would I do it?
If not, is there an easier way to set some basic rules on CentOS other than iptables?
I'm more of an app developer and less of a sys admin.
6 Answers
Since ufw is available in the EPEL repository, it can be directly installed as a package:
yum install -y epel-release yum install -y ufw While I am not sure if UFW can be ported easily you can try an alternative
yum install system-config-firewall-tuisystem-config-firewall-tui- Select Enabled
- Choose Customize (tab between elements in NCurses Dialog, use space to select)
- Now use down arrow to navigate list, space to enable/disable the port
- Choose Close
- Choose Ok
You will now have your firewall setup and this will be enabled on every reboot.
I can confirm this works on CentOS 7 for users who want to use gufw + ufw instead of firewalld
cd /etc/yum.repos.d/ wget yum install ufw cd /home systemctl enable ufw systemctl start ufw chkconfig ufw on ufw enable ufw status ufw default deny incoming ufw default allow outgoing or ufw default deny outgoing systemctl disable firewalld systemctl stop firewalld chkconfig firewalld off yum install webkitgtk3 gnome-icon-theme-symbolic python-distutils-extra gtk2 gtk2.i686 gtk3 gtk2-devel gtk3-devel python-netifaces intltool cd a_place_to_build mkdir gufw wget tar -xvf gui-ufw-15.04.4.tar.gz cd gui-ufw-15.04.4 as root or sudo -i python setup.py clean install cd /usr/bin cp -rf gufw gufw.orig cp -rf gufw.pkexec gufw cp: overwrite ‘gufw’? y then launch as $sudo gufw or as root gufw #(optional) yum remove firewalld firewall-config firewall-applet You should take a look at firewalld. It's more RH friendly.
1tested on fedora 21
gufw + ufw:
mkdir gufw cd gufw wget tar -xvf gui-ufw-15.*.tar.gz cd gui-ufw-15.10.0/ echo '[home_zhonghuaren] name=RPM Sphere (Fedora_21) type=rpm-md baseurl= gpgcheck=1 gpgkey= enabled=1' > /etc/yum.repos.d/zhonghuaren_suse_gufw.repo yum install ufw systemctl enable ufw systemctl start ufw chkconfig ufw on ufw enable ufw status ufw default deny incoming ufw default allow outgoing #ufw default deny outgoing 1 yum install webkitgtk3 gnome-icon-theme-symbolic python-distutils-extra gtk2 gtk3 gtk2-devel gtk3-devel python-netifaces intltool python setup.py install --prefix=/usr systemctl disable firewalld systemctl stop firewalld chkconfig firewalld off #(optional) yum remove firewalld firewall-config firewall-applet 3 2 1 2In CentOS 7, run following commands:
sudo yum install epel-release -y sudo yum install --enablerepo="epel" ufw -y Then enable ufw
ufw enable