firewall-cmd

man, firewall-cmd always trips me up. so, here are some pointers. for myself, obviously.

open port & port ranges

## open a single port
sudo firewall-cmd --zone=public --permanent --add-port=8080/tcp

## replace 3000-3010 with your desired port range
sudo firewall-cmd --zone=public --permanent --add-port=3000-3010/tcp

## reload
sudo firewall-cmd --reload

close/remove a port & port range

## close a single port
sudo firewall-cmd --zone=public --permanent --remove-port=8080/tcp

## replace 3000-3010 with your desired port range
sudo firewall-cmd --zone=public --permanent --remove-port=3000-3010/tcp

## reload
sudo firewall-cmd --reload

add a service (like ssh, http)

context for myself: if kdeconnect ain’t working, this might be it.

sudo firewall-cmd --zone=public --permanent --add-service=kdeconnect
sudo firewall-cmd --reload

list active services

sudo firewall-cmd --zone=public --list-services

panic mode

lmao.
but can’t laugh at it, cause what if real shit happens one day, and this’ll end up useful?

btw shit blocks all traffic.

## panic mode
sudo firewall-cmd --panic-on
## turn panic off
sudo firewall-cmd --panic-off

ffmpeg gurk