Disabling the firewalld Service
In Oracle Linux
8,
nftables
isn't enabled by default because the firewalld
service uses it as its backend. Disable firewalld
before beginning to work
with nftables
.
Do the following:
-
Disable the
firewalld
service if it isn't already disabled:sudo systemctl disable --now firewalld
- Clear any preexisting rulesets in
nftables
created byfirewalld
:sudo nft flush ruleset
- Display the current status of the
firewalld
service and ensure that the service is listed asinactive (dead)
:systemctl status firewalld
firewalld.service Loaded: masked (Reason: Unit firewalld.service is masked.) Active: inactive (dead) Jan 20 15:16:07 localhost.localdomain systemd[1]: Starting firewalld - dynamic firewall daemon... Jan 20 15:16:08 localhost.localdomain systemd[1]: Started firewalld - dynamic firewall daemon. Jan 20 15:16:08 localhost.localdomain firewalld[1635]: WARNING: AllowZoneDrifting is enabled. This is considered an insecure configuration option. It will be removed in a future release. Please consider disabling it now. Jan 20 15:52:27 localhost.localdomain systemd[1]: Stopping firewalld - dynamic firewall daemon... Jan 20 15:52:27 localhost.localdomain systemd[1]: firewalld.service: Succeeded. Jan 20 15:52:27 localhost.localdomain systemd[1]: Stopped firewalld - dynamic firewall daemon.