How to create block outgoing traffic rules?

[19beans]

Hi,

I’m trying to create rules to block outbound traffic. What should i use nftables or iptables?

Thanks for any help

[vgaetera (Vladislav Grigoryev)]

Fedora relies on firewalld/nftables by default, so a kill switch looks like this:

sudo firewall-cmd --permanent --new-policy=host-block
sudo firewall-cmd --permanent --policy=host-block --set-target=REJECT
sudo firewall-cmd --permanent --policy=host-block --add-ingress-zone=HOST
sudo firewall-cmd --permanent --policy=host-block --add-egress-zone=ANY
sudo firewall-cmd --reload

However keep in mind the related caveats:
How can I configure a killswitch for OpenVPN using firewalld? - #8 by vgaetera

[19beans]

Ok thanks