Firewall-cmd: command not found

sevufajiji · March 7, 2019, 12:31pm

i have found the firewall tutorial page, using the iptables first and it works, but when i do the commands for firewallD, then have a error with every rule:

-bash: firewall-cmd: command not found

Do i need install (or only enable?) firewalld or maybe i dont need this rules and using the iptables rules only is enough?

jfb · March 7, 2019, 5:36pm

This is the case. When you install Pi-Hole, it will properly configure itself to work.

github.com/pi-hole/pi-hole

automated%20install/basic-install.sh

master


      
                  ;;
              esac
              # Check the current state of SELinux
              CURRENT_SELINUX=$(getenforce)
              case "${CURRENT_SELINUX,,}" in
              enforcing)
                  printf "  %b %bCurrent SELinux: %s%b\\n" "${CROSS}" "${COL_RED}" "${CURRENT_SELINUX,,}" "${COL_NC}"
                  SELINUX_ENFORCING=1
                  ;;
              *) # 'permissive' and 'disabled'
                  printf "  %b %bCurrent SELinux: %s%b\\n" "${TICK}" "${COL_GREEN}" "${CURRENT_SELINUX,,}" "${COL_NC}"
                  ;;
              esac
          else
              echo -e "  ${INFO} ${COL_GREEN}SELinux not detected${COL_NC}"
          fi
          # Exit the installer if any SELinux checks toggled the flag
          if [[ "${SELINUX_ENFORCING}" -eq 1 ]] && [[ -z "${PIHOLE_SELINUX}" ]]; then
              printf "  Pi-hole does not provide an SELinux policy as the required changes modify the security of your system.\\n"
              printf "  Please refer to https://wiki.centos.org/HowTos/SELinux if SELinux is required for your deployment.\\n"
              printf "      This check can be skipped by setting the environment variable %bPIHOLE_SELINUX%b to %btrue%b\\n" "${COL_LIGHT_RED}" "${COL_NC}" "${COL_LIGHT_RED}" "${COL_NC}"

sevufajiji · March 7, 2019, 5:57pm

yeah, but i have openvpn and opened 1194 port in my router. I found this page to make things more secure:

But the rules on that vpn/firewall page wasn't enough (pihole doesn't work anymore), then i found this page and it makes things mutch better again: Redirecting...

But ok, maybe i dont need the firewall-cmd rules anymore.

sevufajiji · March 10, 2019, 5:40pm

Hmm, i think that i need firewalld, when i reboot the pi then the iptables is removed.

Do i need only this:
sudo apt-get install firewalld

and after that this commands:
firewall-cmd --permanent --add-service=http --add-service=dns --add-service=dhcp --add-service=dhcpv6
firewall-cmd --permanent --new-zone=ftl
firewall-cmd --permanent --zone=ftl --add-interface=lo
firewall-cmd --permanent --zone=ftl --add-port=4711/tcp
firewall-cmd --reload

Or do i need more to do?

system · March 31, 2019, 5:40pm

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.