Firewalld
ファイルの構文はsystemdのサービスファイルに似ている。たとえば、TCPのポート番号443をlistenするウェブサーバー用のシンプルなサービスファイルは、次のような内容となる。
制限:
Firewalld currently does not support outbound rules to the same capacity of inbound rules. Limitations include things such on ipsets, service names, and default outbound block by default rules required by standards such as NIST 800-171 and 800-53. Default block all needs to be done at the "raw" IPTables level via the --direct flag, and with the order of operations FirewallD uses to prioritize Rules, Rich Rules, Direct Rules, it may be easier to enter all rules for outbound via --direct or use iptables (netfilter-persist)