# Firewall block outgoing connections

**URL:** <https://forums.suse.com/t/firewall-block-outgoing-connections/32085>\
**Category:** SLES Configure-Administer\
**Created:** [March 2, 2018, 4:21pm UTC](https://forums.suse.com/t/firewall-block-outgoing-connections/32085 "2018-03-02T16:21:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![christianmolecki](https://avatars.discourse-cdn.com/v4/letter/c/e95f7d/32.png) [@christianmolecki](https://forums.suse.com/u/christianmolecki)\
**Post date:** [March 2, 2018, 4:21pm UTC](https://forums.suse.com/t/firewall-block-outgoing-connections/32085/1 "2018-03-02T16:21:49Z")

</div>

Hello together,

per default the firewall drops all incoming and allows alls outgoing traffic.  
Is it possible to limit the outgoing connections via whitelisting (like incoming)?.

Best Regards  
Christian

---

<div class="post-metadata">

**Author:** ![ab1](https://avatars.discourse-cdn.com/v4/letter/a/d2c977/32.png) [@ab1](https://forums.suse.com/u/ab1)\
**Post date:** [March 2, 2018, 10:46pm UTC](https://forums.suse.com/t/firewall-block-outgoing-connections/32085/2 "2018-03-02T22:46:42Z")

</div>

On 03/02/2018 07:24 AM, christianmolecki wrote:[color=blue]

> Hello together,
> 
> per default the firewall drops all incoming and allows alls outgoing  
> traffic.[/color]

To be clear, UDP and TCP are blocked; other things like ICMP are still  
allowed.  
[color=blue]

> Is it possible to limit the outgoing connections via whitelisting (like  
> incoming)?.[/color]

I do not know for sure, but you could probably do this with the custom  
rules option in the SuSEfirewall2 sysconfig file at  
/etc/sysconfig/SuSEfirewall2 :

```auto

## Type: string
#
# Do you want to load customary rules from a file?
#
# This is really an expert option. NO HELP WILL BE GIVEN FOR THIS!
# READ THE EXAMPLE CUSTOMARY FILE AT
/etc/sysconfig/scripts/SuSEfirewall2-custom
#
#FW_CUSTOMRULES="/etc/sysconfig/scripts/SuSEfirewall2-custom"
FW_CUSTOMRULES=""

```

–  
Good luck.

If you find this post helpful and are logged into the web interface,  
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the  
forum as I do not use the web interface often.