RH134 Ch 9: firewalld Zones, Services and Rich Rules

servera is becoming WebAsha's intranet web server. Publish the site through firewalld, open the admin port, trust serverb, block a misbehaving host and tidy up a rule someone added only to the running configuration.

Tasks

1. Install-check, start and enable httpd, put the text WebAsha Intranet in /var/www/html/index.html, and allow the http service in the default zone, now and permanently.
2. Open port 8443/tcp in the default zone, now and permanently.
3. Send all traffic from serverb (172.25.250.11) to the trusted zone, now and permanently.
4. Add a rich rule to the default zone that rejects all traffic from 172.25.250.99, now and permanently.
5. A colleague opened 5000/tcp in the running firewall only, so it vanishes on reload. Make it permanent.
6. Remove the unused cockpit service from the default zone, now and permanently.