Question

A web server administrator runs firewalld on a RHEL 9 host. They temporarily allowed HTTPS traffic during testing with 'firewall-cmd --add-service=https', which worked correctly. However, after rebooting the server, external clients can no longer reach the site on port 443. What should the administrator do to allow HTTPS traffic to survive reboots?

Accepted Answer

Run 'firewall-cmd --permanent --add-service=https' and then 'firewall-cmd --reload'

Answer

Run 'firewall-cmd --add-service=https --timeout=0' to make the rule persistent

Answer

Edit /etc/services to change the port mapping for HTTPS and restart the network

Answer

Run 'systemctl enable firewalld' so the current ruleset is saved automatically