Add firewalld

diff --git a/learning.md b/learning.md
index 593df2737dd2a51a0b6859685c28fae76675b098..2db10ac432e520d2e20a381b511a5d1fbb37b903 100644 (file)
--- a/learning.md
+++ b/learning.md
@@ -1,5 +1,6 @@
 2024-01-15: SELinux provides restrictions to files I wasn't aware of, and can prevent execution in some contexts. With eza you can view it with -Z.
 2024-01-14: On linux you can see logical volumes inside a partition with lsblk, they're shown as lvm. If you resize a partition, you still need to resize the lvm (eg. with `lvresize -l +100%FREE` to take all remaining free space), AND the filesystem (eg. using resize2fs). This is important eg when installing an OS from an image as you might not be using your whole disk.
 2024-01-15: SELinux provides restrictions to files I wasn't aware of, and can prevent execution in some contexts. With eza you can view it with -Z.
 2024-01-14: On linux you can see logical volumes inside a partition with lsblk, they're shown as lvm. If you resize a partition, you still need to resize the lvm (eg. with `lvresize -l +100%FREE` to take all remaining free space), AND the filesystem (eg. using resize2fs). This is important eg when installing an OS from an image as you might not be using your whole disk.

+2024-01-14: On fedora rather than ufw or nftables, you use firewalld. You can create services (eg. gopher with port tcp 70 goes in /etc/firewalld/services/gopher.xml), attach them to zones with `firewall-cmd --zone=<YOURZONE> --add-service=gopher --permanent`

 2024-01-14: User systemd files are expected in /etc/ and not /lib/
 2024-01-14: You can use @ and %i in systemd to have multiple instances (eg myfile@.service, and then executable=blabla %i) where %i will be what comes after @. (So in myfile@howdy, %i will expand to howdy)
 2024-01-13: PPP Connections stay alive in the old net router, so you don't need to run ATDTPPP again, but just the connection.
 2024-01-14: User systemd files are expected in /etc/ and not /lib/
 2024-01-14: You can use @ and %i in systemd to have multiple instances (eg myfile@.service, and then executable=blabla %i) where %i will be what comes after @. (So in myfile@howdy, %i will expand to howdy)
 2024-01-13: PPP Connections stay alive in the old net router, so you don't need to run ATDTPPP again, but just the connection.