Sorted --list-all rich rules

[Peter van Heck]

"firewall-cmd --zone=public --list-all" gives me a random list of all rich rules.
With over 100 rules it is hard to manage

Is it possible to sort by IP and/or port?
Is it possible to list only a certain port, like all rich rules on port 22, sorted by IP?

[Greaser, Tom]

firewall-cmd --zone=public --list-all | grep rule | grep ssh

Thanks,
Tom
Office Phone [phone]
Vidyo Room: Tom Greaser  IVR dialing in by phone [phone]x010013#
For current list of network alerts please visit.
http://its.hsc.wvu.edu/

________________________________________
From: Peter van Heck 
Sent: Monday, April 25, 2016 6:10 AM
To: [e-mail]
Subject: Sorted --list-all rich rules

"firewall-cmd --zone=public --list-all" gives me a random list of all rich rules.
With over 100 rules it is hard to manage

Is it possible to sort by IP and/or port?
Is it possible to list only a certain port, like all rich rules on port 22, sorted by IP?
_______________________________________________
firewalld-users mailing list
[e-mail]
https://lists.fedorahosted.org/admin/lists/[e-mail]...

[Peter van Heck]

Ah, of course. This really helps, thanks a lot!

firewall-cmd --zone=public --list-all | grep rule | grep ipv6 | grep 443
> firewall-cmd --zone=public --list-all | grep rule | grep ssh
>
> Thanks,
> Tom

[Thomas Woerner]

On 04/25/2016 12:10 PM, Peter van Heck wrote:
> "firewall-cmd --zone=public --list-all" gives me a random list of all rich rules.
> With over 100 rules it is hard to manage

It is not a random order. It is the order they have been added.
> Is it possible to sort by IP and/or port?
> Is it possible to list only a certain port, like all rich rules on port 22, sorted by IP?

Besides using grep on the output there is no way how to do that.

For the --list-rich-rules option it might be possible to add sorting or 
filtering. Maybe it would be good to outline the options you want to 
have as a starting point. Then it could be discussed, what can be done 
with it.

This is also not possible with firewall-config right now, but it would 
surely be nice to have it.
> firewalld-users mailing list
> [e-mail]
> https://lists.fedorahosted.org/admin/lists/[e-mail]...

Thomas

[Peter van Heck]

> It is not a random order. It is the order
> they have been added.

Ok thanks, that makes sense.
> For the --list-rich-rules option it might be possible to add sorting or 
> filtering. Maybe it would be good to outline the options you want to 
> have as a starting point. Then it could be discussed, what can be done 
> with it.

For the webservers it would be helpfull to get Fi:
All rich rules > matching ipv4 + ipv6 + port 80 + 443, sorted 1st by protocol, then by port, then by IP

Peter