Problem seeing network scanner thru firewall

[Sherman Grunewagen]

On 01/11/2014 05:43 AM, Jorge Fábregas wrote:
> On 01/10/2014 11:16 PM, Sherman Grunewagen wrote:
>> In the output of `iptables -L',  I see several lines that look like
>>
>>         ACCEPT     udp  --  anywhere             224.0.0.251             udp dpt:mdns ctstate NEW
>
> Hi Sherman,
>
> I have no experience with this particular protocol (mdns) but I know a
> bit about firewalld.  The reason you're seeing this output from iptables
> is that, perhaps, some other zone (other than your default) is allowing
> mdns.  A zone is really a predefined set of rules.  By just looking at
> your output (without the chain name) we can't tell that much.
>
> We need to find out which particular zone you're on and whether it has
> the mdns service configured.  Please post the output of (you need to run
> it as root):
>
> firewall-cmd --list-all

Thanks for the help Jorge. Here's the output:

[root at neuron ~]# firewall-cmd --list-all
public (default, active)
   interfaces: em1
   sources:
   services: mdns ssh
   ports:
   masquerade: no
   forward-ports:
   icmp-blocks:
   rich rules:

Sherman