Sep 4, 2014
Reminder on iptables configs CentOS6.5 and earlier
lokkit: Seems like a standard. AKA system-config-firewall-base in RH-land. Is used in a lot of puppet manifests floating around the foreman-associated projects and in SaltStack. Simple configuration, e.g.
lokkit --list-services
, add a hole for SSH
lokkit --service=ssh
or
lokkit --port=ssh:tcp
firewalld: in Fedora20 and CentOS7. This is a dynamic firewall configuration daemon (uses dbus) which can co-exist with lokkit.
The alternatives are? Shorewall? Just run iptables commands?
Debian got rid of it, claiming it was buggy and unmaintained.
NB: netstat-nat is interesting.