Configure firewalld for routing traffic between internal and external

[barani_pd]

I have installed Rocky Linux 9 in a pc with 2 network cards, one is connected towards LAN, 172.16.0.0/24 and another is connected to WAN, 192.168.20.134/32 (internet). I want to configure this system to work as transparent gateway to all systems in LAN to connect to internet. Can anyone guide me, please?

[iwalker]

Hi,

This post lists the steps to configure firewalld to allow such a situation:

Firewalld/NetworkManager Internet Routing Not working in Rocky Linux 9.x

As an aside, I just did it on Rocky 9 and it works: firewall-cmd --zone=external --add-interface=enp2s0 --permanent firewall-cmd --zone=internal --add-interface=enp1s0 --permanent firewall-cmd --set-default-zone=external --permanent firewall-cmd --reload firewall-cmd --get-default-zone firewall-cmd --new-policy internal-external --permanent firewall-cmd --reload firewall-cmd --policy internal-external --add-ingress-zone=internal --permanent firewall-cmd --policy internal-external --add-egress-z…

opening the link will show it formatted better than the above quoted text. Just make sure to substitute the correct network card for the internal and external zones. So internal zone being the one that has the 172 address, and external zone having the 192 wan address.

Changing the target to accept allows all traffic. Otherwise, leave the default target, and just add the services that you want to allow through. Eg, http, dns.

[barani_pd]

@Firewalld/NetworkManager Internet Routing Not working in Rocky Linux 9.x

firewall-cmd --set-default-zone=external --permanen

Hi iwalker,
Thank you. I followed your link and it is working. Delay to reply is regretted. Thank you once again.