How to remove these rich rules?

[Jason Long]

Hello,
I have below rich rules and I want to remove the first one:

rich rules: 
    rule port port="80" protocol="tcp" log prefix="HttpsLimit" level="warning" limit value="100/s" accept limit value="100/s"
    rule family="ipv4" source address="X.X.X.X" reject

How can I do it?

Thank you.

[Eric Garver]

On Tue, Jan 12, 2021 at 09:58:28AM -0000, Jason Long wrote:
> Hello,
> I have below rich rules and I want to remove the first one:
>
> rich rules: 
>    rule port port="80" protocol="tcp" log prefix="HttpsLimit" level="warning" limit value="100/s" accept limit value="100/s"
>    rule family="ipv4" source address="X.X.X.X" reject

The same way you added them. Except you use `--remove-rich-rule`.

# firewall-cmd --zone <zone> --permanent --remove-rich-rule='rule port port="80" protocol="tcp" log prefix="HttpsLimit" level="warning" limit value="100/s" accept limit value="100/s"'
  # firewall-cmd --zone <zone> --permanent --remove-rich-rule='rule family="ipv4" source address="X.X.X.X" reject'
  # firewall-cmd --reload

[Jason Long]

Thank you.

On Tuesday, January 12, 2021, 04:04:12 PM GMT+3:30, Eric Garver  wrote:

On Tue, Jan 12, 2021 at 09:58:28AM -0000, Jason Long wrote:
> Hello,
> I have below rich rules and I want to remove the first one:
>
> rich rules: 
>     rule port port="80" protocol="tcp" log prefix="HttpsLimit" level="warning" limit value="100/s" accept limit value="100/s"
>     rule family="ipv4" source address="X.X.X.X" reject

The same way you added them. Except you use `--remove-rich-rule`.

# firewall-cmd --zone <zone> --permanent --remove-rich-rule='rule port port="80" protocol="tcp" log prefix="HttpsLimit" level="warning" limit value="100/s" accept limit value="100/s"'
  # firewall-cmd --zone <zone> --permanent --remove-rich-rule='rule family="ipv4" source address="X.X.X.X" reject'
  # firewall-cmd --reload