Just trying to enable nginx on Fedora 20

yum install nginx

systemctl enable nginx.service

service nginx start
# or the new way
systemctl start nginx

At this point I still can’t connect with a remote computer so need to figure out how enable the firewall to allow port 80 (http)

Before firewalld you could just add rules with iptables but firewalld controls firewall now.

You need to identify the zone that your physical network adaptor is in

firewall-cmd –list-all-zones | more

home
  interfaces: 
  sources: 
  services: dhcpv6-client http ipp-client mdns samba-client ssh
  ports: 
  masquerade: no
  forward-ports: 
  icmp-blocks: 
  rich rules: 

internal
  interfaces: 
  sources: 
  services: dhcpv6-client ipp-client mdns samba-client ssh
  ports: 
  masquerade: no
  forward-ports: 
  icmp-blocks: 
  rich rules: 

public (default, active)
  interfaces: p4p1
  sources: 
  services: dhcpv6-client ipp ipp-client mdns samba ssh
  ports: 
  masquerade: no
  forward-ports: 
  icmp-blocks: 
  rich rules: 

My ethernet connection is in the public zone and it’s name is p4p1

So once I know this I can add a service to that zone.

To get a list of all available services

firewall-cmd --get-services
amanda-client amanda-k5-client bacula bacula-client dhcp dhcpv6 dhcpv6-client dns freeipa-ldap freeipa-ldaps freeipa-replication ftp high-availability http https imaps ipp ipp-client ipsec kerberos kpasswd ldap ldaps libvirt libvirt-tls mdns mountd ms-wbt mysql nfs ntp openvpn pmcd pmproxy pmwebapi pmwebapis pop3s postgresql privoxy proxy-dhcp puppetmaster radius rpc-bind samba samba-client sane smtp ssh synergy telnet tftp tftp-client tor-socks transmission-client vnc-server wbem-https xmpp-bosh xmpp-client xmpp-local xmpp-server

To get my enabled serivces

firewall-cmd --list-services
dhcpv6-client ipp ipp-client mdns samba ssh

Now we need to add the correct service to the zone associated with our physical network adaptor

firewall-cmd --zone=public --add-service=http
success

I believe a reboot will remove the rule so you need to specify that it’s permanent too

firewall-cmd --zone=public --add-service=http --permanent
success

While you are at it. Probably want to enable https too.

# enable it now
firewall-cmd --zone=public --add-service=https
success

# make it persist across reboots
firewall-cmd --zone=public --add-service=https --permanent success

Then you can check if it added ok

[root@bb01 ~]# firewall-cmd --list-services
dhcpv6-client http ipp ipp-client mdns samba ssh

# you can specify zone if it's other than than the default
[root@bb01 ~]# firewall-cmd --list-services --zone=public
dhcpv6-client http ipp ipp-client mdns samba ssh

Make sure you have added the service permanently. Check with the –permanent flag

firewall-cmd --list-services --permanent
dhcpv6-client http https ipp ipp-client mdns samba ssh

Removing the services if you don’t want it enabled for that zone

firewall-cmd --zone=public --remove-service=http