---
title: "How to Install and Setup FireWall on Amazon Linux 2"
description: "We will learn how to install and setup FireWall on Amazon Linux 2 in this tutorial. We will also discover how to set up FireWall so that it functions with the Amazon Linux 2."
author: "Mohammad Abu Mattar"
canonical: https://mkabumattar.com/blog/post/how-to-install-and-setup-firewall-on-amazon-linux-2
---

# How to Install and Setup FireWall on Amazon Linux 2

## Introduction

We will learn how to install and setup FireWall on Amazon Linux 2 in this tutorial. We will also discover how to set up FireWall so that it functions with the Amazon Linux 2.

## Prerequisites

To follow along with this tutorial, you will need:

- An Amazon Linux 2 EC2 instance with a public IP address.
- A user with sudo privileges.

## Install and Setup Firewalld on Amazon Linux 2

### Step 1: Install Firewalld

Before we can install FireWall, we must first update the system.

```shell
# Update the system
sudo yum update -y
```

Now that the system has been updated, we can install FireWall.

```shell
# Install FireWall
sudo yum install firewalld -y
```

Next, after installing FireWall, it's time to verify whether the _iptables_ service is running.

```shell
# Check if the iptables service is running
sudo systemctl status iptables
```

If the _iptables_ service is running, we need to stop it.

```shell
# Stop the iptables service
sudo systemctl stop iptables
```

Now that the _iptables_ service is stopped, we can start the FireWall service.

```shell
# Start the FireWall service
sudo systemctl start firewalld
```

To verify that the FireWall service is running, we can use the following command.

```shell
# Check if the FireWall service is running
sudo systemctl status firewalld
```

Newly installed FireWall services are not enabled by default. To enable the FireWall service, we can use the following command.

```shell
# Enable the FireWall service
sudo systemctl enable firewalld
```

### Step 2: Configure Firewalld

Now that the FireWall service is running, we can configure it. To configure the FireWall service, we can use the following command.

```shell
# Configure the FireWall service
sudo firewall-cmd --permanent --zone=public --add-service=http
sudo firewall-cmd --permanent --zone=public --add-service=https
sudo firewall-cmd --permanent --zone=public --add-service=ssh
sudo firewall-cmd --reload
```

List Firewalld Zones

```shell
# List Firewalld Zones
sudo firewall-cmd --get-zones
```

List Services Default Zone

```shell
# List Services Default Zone
sudo firewall-cmd --get-services
```

To verify that the FireWall service is configured correctly, we can use the following command.

```shell
# Check the FireWall service configuration
sudo firewall-cmd --list-all
```

List All Firewalld Zones

```shell
# List All Firewalld Zones
sudo firewall-cmd --list-all-zones
```

### Step 3: Set Up Default Firewalld Zone

To set up the default Firewalld zone, we can use the following command.

```shell
# Set up the default Firewalld zone
sudo firewall-cmd --set-default-zone=public
```

### Step 4: Check FireWall Status

To check the FireWall status, we can use the following command.

```shell
# Check the FireWall status
sudo firewall-cmd --state
```

### Step 5: Assigning Services to Firewalld Zones

To assign services to Firewalld zones, we can use the following command.

```shell
# Assign services to Firewalld zones
firewall-cmd --state
firewall-cmd --get-active-zones
```

### Step 6: Adding Services to Firewalld Zones

To add services to Firewalld zones, we can use the following command.

```shell
# Add services to Firewalld zones
firewall-cmd --add-service=rtmp

# Remove services from Firewalld zones
firewall-cmd --zone=public --remove-service=rtmp

# add port to zone
firewall-cmd --zone=public --add-port=80/tcp --permanent

# remove port from zone
firewall-cmd --zone=public --remove-port=80/tcp --permanent
```

## Conclusion

In this tutorial, we learned how to install and setup FireWall on Amazon Linux 2. We also learned how to set up FireWall so that it functions with the Amazon Linux 2.

## References

- [Firewalld Official Website](https://firewalld.org/)
- [Firewalld Documentation - Introduction to firewalld](https://firewalld.org/documentation/man-pages/firewalld.html)
- [Firewalld Documentation - firewall-cmd](https://firewalld.org/documentation/man-pages/firewall-cmd.html)
- [Amazon EC2 User Guide for Linux Instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts.html)
- [Security Groups for your VPC - AWS Documentation](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html) (Note: AWS Security Groups act as a primary firewall)
- [Managing software on your Linux instance - AWS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/managing-software.html)
- [Controlling Services with systemctl - Red Hat](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system_administrators_guide/sect-managing_services_with_systemd-services) (Amazon Linux is RHEL-based)
- [Using firewalld - Fedora Project Docs](https://docs.fedoraproject.org/en-US/quick-docs/firewalld/)
- [Understanding Firewalld Zones - DigitalOcean](https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-firewalld-on-centos-7#understanding-firewalld-zones)
- [AWS - Amazon Linux 2 AMI Information](https://aws.amazon.com/amazon-linux-2/)
- [iptables Tutorial - Netfilter project](https://www.netfilter.org/documentation/HOWTO//packet-filtering-HOWTO.html) (For context, as firewalld is a frontend for netfilter)