firewalld

Manage firewalld zones, services, ports, and rich rules via firewall-cmd.

6|1|Updated Feb 16, 2026
One-click install
npx skills add https://github.com/L3DigitalNet/Claude-Code-Plugins --skill firewalld
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: firewalld
Source: https://github.com/L3DigitalNet/Claude-Code-Plugins/tree/main/plugins/linux-sysadmin/skills/firewalld
Command: npx skills add https://github.com/L3DigitalNet/Claude-Code-Plugins --skill firewalld

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill simplifies the complex task of configuring and managing the firewalld service on Linux systems, ensuring network security and controlled access.

Core Features & Use Cases

  • Zone Management: Configure different trust levels for network interfaces.
  • Service & Port Rules: Easily allow or deny specific services and ports.
  • Rich Rules: Implement advanced rules for source IP restrictions, port forwarding, and logging.
  • Use Case: Securely expose a web server by allowing only HTTP/HTTPS traffic on the public zone, while restricting SSH access to a specific management IP address.

Quick Start

Use the firewalld skill to allow the http service on the public zone permanently and reload the firewall.

Frequently Asked Questions about firewalld

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure firewalld zones to manage network trust levels on a Linux server?

Firewalld zones manage network trust levels by assigning different rules to network interfaces. You configure zones using the firewall-cmd utility to control traffic flow, isolating public interfaces from trusted internal networks for secure access control.

What is the best way to allow HTTP and HTTPS traffic while restricting SSH to a specific IP in firewalld?

The best way to restrict SSH while allowing web traffic is implementing firewalld rich rules. Rich rules enable advanced source IP restrictions for SSH alongside standard service rules for HTTP and HTTPS on the public zone.

Does firewalld use nftables as its backend for filtering network traffic?

Yes, firewalld uses nftables as its backend for filtering network traffic. Managing firewalld configurations requires direct interaction with the firewall-cmd utility, which translates rules into the underlying nftables backend.

How do I permanently add a service to a firewalld zone and apply the changes?

To permanently add a service to a firewalld zone, use the firewall-cmd utility with the permanent flag, then reload the firewall. This ensures service and port rule management changes persist across system reboots.

Can I use firewalld rich rules for port forwarding and traffic logging?

Yes, firewalld rich rules support advanced configurations including port forwarding and traffic logging. Rich rules provide granular control over network security by implementing source IP restrictions and logging actions beyond basic service allowances.