mise bootstrap firewall

• Usage: mise bootstrap firewall <SUBCOMMAND>
• Effect: read-only
• Source code: src/cli/bootstrap.rs

Manage the Linux host firewall from [bootstrap.linux.firewall]

Works with nftables, firewalld, or UFW, and keeps mise's rules separate from other host rules. Over SSH, mise refuses a default incoming policy of deny or reject unless a rule allows the current connection or the config sets allow_lockout = true. Check apply --dry-run before applying a policy to a remote machine.

Flags

• -h --help — Print help

Examples

Show the firewall's state

mise bootstrap firewall status

Show the policy and rules that would change

mise bootstrap firewall apply --dry-run

Subcommands

• mise bootstrap firewall apply [-n --dry-run] [-y --yes]
• mise bootstrap firewall status [-J --json] [--missing]

Related documentation

• Linux firewall.
• mise bootstrap [FLAGS] [SUBCOMMAND].
• Global flags and argument syntax.