mjhjmtu

I've an application which is running locally on 127.0.0.1 and port 8888 in addition to openvpn which is installed and using eth1 interface

The active zones on firewall firewall-cmd:

1. public (interface: eth0)


2. external (interface: lo eth1)

What i'm trying to do :

1. Allow port 8888/tcp on zone public with the openvpn IP source only (To ensure that only in case when the user gets connected to the VPN first then he should be able to access port 8888)


2. Redirecting the public port 8888 where internally the firewall redirects the targeted public port 8888 on zone public to the local IP address 127.0.0.1 and the local port 8888 on zone external
   

I tried these commands but it did not work:

# firewall-cmd --permanent --zone=external --add-interface=eth1
# firewall-cmd --permanent --zone=external --add-port=8888/tcp
# firewall-cmd --permanent --zone=public --add-rich-rule='
 rule family="ipv4"
 source address="10.8.0.0/24"
 port protocol="tcp" port="8888" accept'
# firewall-cmd --permanent --zone=public --add-forward-port=port=8888:proto=tcp:toport=8888:toaddr=127.0.0.1

Any hints ?