Cita de admin en 26 julio, 2019, 12:20 pm

firewall-cmd --zone=internal --add-service=ssh --permanent
firewall-cmd --zone=internal --add-service=http --permanent
firewall-cmd --zone=internal --add-service=https --permanent
firewall-cmd --zone=internal --add-port=3126/tcp --permanent
firewall-cmd --zone=internal --add-port=3127/tcp --permanent
firewall-cmd --zone=internal --add-port=3128/tcp --permanent
firewall-cmd --zone=internal --add-port=8000/tcp --permanent

nmcli c mod eth1 connection.zone external
firewall-cmd --zone=external --add-masquerade --permanent
firewall-cmd --zone=external --query-masquerade
/etc/firewalld/direct.xml
<?xml version="1.0" encoding="utf-8"?>
<direct>
<rule ipv="ipv4" table="nat" chain="PREROUTING" priority="0">-i eno33554952 -p tcp --dport 80 -j REDIRECT --to-ports 3126</rule>
<rule ipv="ipv4" table="nat" chain="PREROUTING" priority="0">-i eno33554952 -p tcp --dport 443 -j REDIRECT --to-ports 3127</rule>
</direct>