On Wed, 2014-10-29 at 19:14 -0700, Jason T. Slack-Moehrle wrote:
so I figured this out, I think:
firewall-cmd --zone=public --add-port=2888/tcp --permanent
but if is a known service, you can use:
firewall-cmd --zone=public --add-service=http --permanent
and then reload the firewall
firewall-cmd --reload
iptables -A table-name -p tcp --dport 80 -j ACCEPT
No reboot needed. 'table-name' can be INPUT or another user defined table name.
firewall-cmd with its Windoze-like structure and syntax is definitely unappealing to many normal firewall users.