Frederic Steinfels

Sorry, I made a mistake. It is better to do this: firewall-cmd --direct --add-rule ipv4 filter INPUT 1000 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT iptables -D INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT Reasons: - iptables cant set priorities, only firewall-cmd can - inserting the new rule before deleting the old one will make sure you wont be locked out

Banning udp (eg asterisk jail) does not work due