Firewalls

Update firewall for base svc01 services (ntp, pxe, dhcp)

Create firewalld service

tee /usr/lib/firewalld/services/wazuh.xml > /dev/null << 'EOT'

<?xml version="1.0" encoding="utf-8"?>

<service>

  <short>wazuh</short>

  <description>Wazuh SIEM</description>

  <port protocol="tcp" port="9000"/>

  <port protocol="tcp" port="1514"/>

  <port protocol="tcp" port="1515"/>

  <port protocol="tcp" port="55000"/>

</service>

EOT

Restart firewalld to see new service

systemctl restart firewalld

firewall-cmd --state

firewall-cmd --get-active-zones

firewall-cmd --list-all

firewall-cmd --list-services

firewall-cmd --list-ports

firewall-cmd --reload

ll /usr/lib/firewalld/services/

for i in $(firewall-cmd --list-services); do firewall-cmd --permanent --service "$i" --get-ports; done;