I'm using a Free instance on Oracle Cloud. Kernel: Linux 5.4.17-2136.308.9.el8uek.aarch64 aarch64 S.O.: Oracle Linux Server release 8.6 if(window.hljsLoader && !document.currentScript.parentNode.hasAttribute('data-s9e-livepreview-onupdate')) { window.hljsLoader.highlightBlocks(document.currentScript.parentNode); } It is based on CentOS (Linux Oracle), and everything works fine (except for MariaDB), but I noticed that the Firewall is not correct either. Although it works well on other servers, precisely on this one, the firewall after activated, does not create the proper rules, and I lose access. I always need to disable the firewall to access. What to do to fix?

Firewall does not work on Oracle Linux

thiagotgc

I'm using a Free instance on Oracle Cloud.

Kernel:       Linux 5.4.17-2136.308.9.el8uek.aarch64 aarch64
S.O.:         Oracle Linux Server release 8.6

It is based on CentOS (Linux Oracle), and everything works fine (except for MariaDB), but I noticed that the Firewall is not correct either.

Although it works well on other servers, precisely on this one, the firewall after activated, does not create the proper rules, and I lose access.

I always need to disable the firewall to access.

What to do to fix?

aaPanel_Kern

thiagotgc
Hello, try to manually set the firewall
panelPort=7800
sshPort=22

/sbin/ufw allow 20/tcp
/sbin/ufw allow 21/tcp
/sbin/ufw allow 80/tcp
/sbin/ufw allow 888/tcp
/sbin/ufw allow 39000:40000/tcp
/sbin/ufw allow ${panelPort}/tcp
/sbin/ufw allow ${sshPort}/tcp
/sbin/ufw reload
/sbin/ufw status

systemctl start firewalld
firewall-cmd --set-default-zone=public >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=20/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=21/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=80/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=${panelPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=${sshPort}/tcp >/dev/null 2>&1
firewall-cmd --permanent --zone=public --add-port=39000-40000/tcp >/dev/null 2>&1
firewall-cmd --reload

firewall-cmd --list-all

thiagotgc

Even so, the rules, zones and etc... do not appear, correctly in the output of iptables -n -L

aaPanel_Kern

thiagotgc
Hello, the query results with US added in Area Rules are as follows:
iptables -nL|grep DROP

DROP all -- 0.0.0.0/0 0.0.0.0/0 match-set US src