FIREWALLD.POLICY-(5)

📦
version 2.5.2 · 5 versions
, in arch rolling, nixpkgs unstable, ubuntu stonking

✨ FIREWALLD.POLICY-SETS ✨ (that's the firewalld.policy-sets(5) page, bestie 💖)

okay so welcome to the policy sets page of the firewalld manual — this is the one that tells you what policy sets even ARE and how to turn one on. sit down, get comfy 🫶

💅 NAME 💅

firewalld.policy-sets — Policy Sets. yes that's it. that's the name. iconic.

🌸 DESCRIPTION 🌸

🎀 What Are Policy Sets? 🎀

okay so picture this: a policy set is literally just a collection of policies that's meant to be your starter config for a specific use case. the manpage's own example is a home router 🏠 but like, any use case. it's the easy-peasy on-ramp: you get something that works out of the box, and then you fine tune it for your environment, your vibes, your setup. every single policy set has its own dedicated man page explaining what its whole deal is, so go read that one too.

⚠️ here's the thing that gets people: ALL policy sets that ship with firewalld are administratively disabled by default. like, all of them. so using one is a two-step dance: (1) add your interfaces to zones, and (2) remove the disable. that's it. no cap.

🦋 Enabling a Policy Set 🦋

here's a complete example using the gateway policy set. in this scenario: eth0 is your LAN interface and eth1 is the uplink to the internet. so:

# firewall-cmd --permanent --zone internal eth0
# firewall-cmd --permanent --zone external eth1
# firewall-cmd --permanent --policy-set gateway --remove-disable
# firewall-cmd --reload

look at that. four lines. slay 💅 and yes, --reload at the end, don't skip her, she's the one who actually makes it real.

👑 Enabling Multiple Policy Sets 👑

good news bestie: policy sets are guaranteed to interoperate. so you can absolutely enable more than one at the same time. they play nice together. no fighting. no drama. 🌈

💀 Existing Policy Sets 💀

⭐ SEE ALSO ⭐

go read these too, they're all part of the firewalld cinematic universe:

📝 NOTES 📝

🫶 AUTHORS 🫶

the developers who made this happen, giving main character energy:

  • Thomas Woerner <twoerner@redhat.com> — Developer
  • Jiri Popelka <jpopelka@redhat.com> — Developer
  • Eric Garver <eric@garver.life> — Developer

and that's the page!! firewalld 2.5.2, the FIREWALLD.POLICY-(5) manual — thanks for reading, bestie, go enable a policy set responsibly 💜✨

📦 where this page comes from