How to Install and Setup FireWall on Amazon Linux 2

Introduction

We will learn how to install and setup FireWall on Amazon Linux 2 in this tutorial. We will also discover how to set up FireWall so that it functions with the Amazon Linux 2.

Prerequisites

To follow along with this tutorial, you will need:

• An Amazon Linux 2 EC2 instance with a public IP address.
• A user with sudo privileges.

Install and Setup Firewalld on Amazon Linux 2

Step 1: Install Firewalld

Before we can install FireWall, we must first update the system.

# Update the system
sudo yum update -y

Now that the system has been updated, we can install FireWall.

# Install FireWall
sudo yum install firewalld -y

Next, after installing FireWall, it’s time to verify whether the iptables service is running.

# Check if the iptables service is running
sudo systemctl status iptables

If the iptables service is running, we need to stop it.

# Stop the iptables service
sudo systemctl stop iptables

Now that the iptables service is stopped, we can start the FireWall service.

# Start the FireWall service
sudo systemctl start firewalld

To verify that the FireWall service is running, we can use the following command.

# Check if the FireWall service is running
sudo systemctl status firewalld

Newly installed FireWall services are not enabled by default. To enable the FireWall service, we can use the following command.

# Enable the FireWall service
sudo systemctl enable firewalld

Step 2: Configure Firewalld

Now that the FireWall service is running, we can configure it. To configure the FireWall service, we can use the following command.

# Configure the FireWall service
sudo firewall-cmd --permanent --zone=public --add-service=http
sudo firewall-cmd --permanent --zone=public --add-service=https
sudo firewall-cmd --permanent --zone=public --add-service=ssh
sudo firewall-cmd --reload

List Firewalld Zones

# List Firewalld Zones
sudo firewall-cmd --get-zones

List Services Default Zone

# List Services Default Zone
sudo firewall-cmd --get-services

To verify that the FireWall service is configured correctly, we can use the following command.

# Check the FireWall service configuration
sudo firewall-cmd --list-all

List All Firewalld Zones

# List All Firewalld Zones
sudo firewall-cmd --list-all-zones

Step 3: Set Up Default Firewalld Zone

To set up the default Firewalld zone, we can use the following command.

# Set up the default Firewalld zone
sudo firewall-cmd --set-default-zone=public

Step 4: Check FireWall Status

To check the FireWall status, we can use the following command.

# Check the FireWall status
sudo firewall-cmd --state

Step 5: Assigning Services to Firewalld Zones

To assign services to Firewalld zones, we can use the following command.

# Assign services to Firewalld zones
firewall-cmd --state
firewall-cmd --get-active-zones

Step 6: Adding Services to Firewalld Zones

To add services to Firewalld zones, we can use the following command.

# Add services to Firewalld zones
firewall-cmd --add-service=rtmp

# Remove services from Firewalld zones
firewall-cmd --zone=public --remove-service=rtmp

# add port to zone
firewall-cmd --zone=public --add-port=80/tcp --permanent

# remove port from zone
firewall-cmd --zone=public --remove-port=80/tcp --permanent

Conclusion

In this tutorial, we learned how to install and setup FireWall on Amazon Linux 2. We also learned how to set up FireWall so that it functions with the Amazon Linux 2.

References

• AWS - Amazon Linux 2
• Firewalld