Salta al contenuto principale

CentOS 7 - Networking Support • Re: Using Zones in Firewalld to Block Outbound Access

The postinstall script of package 'iptables-services' does do some "systemctl preset".
I'd guess that those "presets" change what services can run.
(Plain "yum install" does not stop firewalld; I guess the effect would show on next restart.)

One can enforce that an installed service does cannot run by masking it:
systemctl mask firewalld.service

(It is possible to start a disabled service, but the mask blocks even that.)
I haven't restarted the system after


yum install
nor run


systemctl mask firewalld.service

Is there any side effect of leaving the state of the firewalld.service as it is?

Statistics: Posted by yildizabdullah — 2023/09/12 13:37:59