Configure Firewall Command

Configure firewall rules using the configure_firewall.py tool.

How This Command Works

This command orchestrates the system-admin skill's firewall configuration tool.

Architecture:

• The tool manages firewall rules and returns structured output
• You read the tool's output to understand current rules
• You DO NOT run iptables/ufw/firewalld directly - let the tool handle it

Workflow

1. Parse user request or $ARGUMENTS:

   • Action: allow, block, list, delete
   • Port/IP to configure
   • Options: --protocol, --source, --zone

2. Invoke the configure_firewall.py tool:

   python3 ./skills/system-admin/scripts/configure_firewall.py <action> [target] [OPTIONS]
   

3. Read the output and report changes made

Examples

Allow a port:

User: /configure-firewall allow 8080 --protocol tcp

Run: python3 ./skills/system-admin/scripts/configure_firewall.py allow 8080 --protocol tcp
Report port opened

Block an IP:

User: /configure-firewall block 192.168.1.100

Run: python3 ./skills/system-admin/scripts/configure_firewall.py block 192.168.1.100
Report IP blocked

List current rules:

User: /configure-firewall list

Run: python3 ./skills/system-admin/scripts/configure_firewall.py list
Display all firewall rules

Delete a rule:

User: /configure-firewall delete 8080

Run: python3 ./skills/system-admin/scripts/configure_firewall.py delete 8080
Report rule removed

Supported Actions

• allow - Open a port
• block - Block IP or port
• list - Show all rules
• delete - Remove a rule
• reset - Reset to defaults

Options

• --protocol tcp|udp - Specify protocol (default: tcp)
• --source <IP> - Restrict to source IP
• --zone <zone> - Firewalld zone
• --permanent - Make rule persistent

Supported Backends

• ufw (Ubuntu/Debian)
• firewalld (RHEL/CentOS)
• iptables (fallback)

Important Reminders

• Always use list before making changes
• Use --permanent to persist across reboots
• Be careful not to lock yourself out (keep SSH open)
• Use --dry-run to preview changes