limit ssh to specific hosts with firewalld (firewall-cmd)

2015-06-23

Here is a little reminder on how to limit ssh (or any port really) to a specific IP using firewalld:


systemctl start firewalld.service
systemctl enable firewalld.service
firewall-cmd –zone=”trusted” –add-source=
firewall-cmd –zone=”trusted” –add-source= –permanent
firewall-cmd –zone=”trusted” –add-source=
firewall-cmd –zone=”trusted” –add-source= –permanent
firewall-cmd –zone=”trusted” –add-service=ssh
firewall-cmd –zone=”trusted” –add-service=ssh –permanent
firewall-cmd –zone=”trusted” –list-all
firewall-cmd –zone=public –remove-service=ssh
firewall-cmd –zone=public –remove-service=ssh –permanent