diff --git a/pages/linux/firewall-cmd.md b/pages/linux/firewall-cmd.md index 338ed9139f..98ad0b47e2 100644 --- a/pages/linux/firewall-cmd.md +++ b/pages/linux/firewall-cmd.md @@ -10,19 +10,19 @@ - Permanently move the interface into the block zone, effectively blocking all communication: -`firewall-cmd --permanent --zone={{block}} --change-interface={{enp1s0}}` +`firewall-cmd --permanent --zone {{block}} --change-interface {{enp1s0}}` - Permanently open the port for a service in the specified zone (like port 443 when in the `public` zone): -`firewall-cmd --permanent --zone={{public}} --add-service={{https}}` +`firewall-cmd --permanent --zone {{public}} --add-service {{https}}` - Permanently close the port for a service in the specified zone (like port 80 when in the `public` zone): -`firewall-cmd --permanent --zone={{public}} --remove-service={{http}}` +`firewall-cmd --permanent --zone {{public}} --remove-service {{http}}` - Permanently forward a port for incoming packets in the specified zone (like port 443 to 8443 when entering the `public` zone): -`firewall-cmd --permanent --zone={{public}} --add-rich-rule='rule family="{{ipv4|ipv6}}" forward-port port="{{443}}" protocol="{{udp|tcp}}" to-port="{{8443}}"'` +`firewall-cmd --permanent --zone {{public}} --add-rich-rule 'rule family "{{ipv4|ipv6}}" forward-port port "{{443}}" protocol "{{udp|tcp}}" to-port "{{8443}}"'` - Reload firewalld to lose any runtime changes and force the permanent configuration to take effect immediately: