Skip to content

Commit 955eb03

Browse files
authored
Merge pull request #1230 from darkexplosiveqwx/adjust-firewall
Cleanup firewalled after removal of api port
2 parents faee8d6 + 1e91036 commit 955eb03

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

docs/main/prerequisites.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -117,12 +117,10 @@ ip6tables -I INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
117117

118118
#### FirewallD
119119

120-
Using the `--permanent` argument will ensure the firewall rules persist reboots. If only IPv4 blocking is used for the Pi-hole installation, the `dhcpv6` service can be removed from the commands below. Create a new zone for the local interface (`lo`) for the pihole-FTL ports to ensure the API is only accessible locally. Finally `--reload` to have the new firewall configuration take effect immediately.
120+
Using the `--permanent` argument will ensure the firewall rules persist reboots. If only IPv4 blocking is used for the Pi-hole installation, the `dhcpv6` service can be removed from the commands below. Finally `--reload` to have the new firewall configuration take effect immediately.
121121

122122
```bash
123123
firewall-cmd --permanent --add-service=http --add-service=https --add-service=dns --add-service=dhcp --add-service=dhcpv6 --add-service=ntp
124-
firewall-cmd --permanent --new-zone=ftl
125-
firewall-cmd --permanent --zone=ftl --add-interface=lo
126124
firewall-cmd --reload
127125
```
128126

0 commit comments

Comments
 (0)