Configure firewalld for routing traffic between internal and external

[iwalker]

Hi,

This post lists the steps to configure firewalld to allow such a situation:

Firewalld/NetworkManager Internet Routing Not working in Rocky Linux 9.x

As an aside, I just did it on Rocky 9 and it works: firewall-cmd --zone=external --add-interface=enp2s0 --permanent firewall-cmd --zone=internal --add-interface=enp1s0 --permanent firewall-cmd --set-default-zone=external --permanent firewall-cmd --reload firewall-cmd --get-default-zone firewall-cmd --new-policy internal-external --permanent firewall-cmd --reload firewall-cmd --policy internal-external --add-ingress-zone=internal --permanent firewall-cmd --policy internal-external --add-egress-z…

opening the link will show it formatted better than the above quoted text. Just make sure to substitute the correct network card for the internal and external zones. So internal zone being the one that has the 172 address, and external zone having the 192 wan address.

Changing the target to accept allows all traffic. Otherwise, leave the default target, and just add the services that you want to allow through. Eg, http, dns.