---
schema_version: "1"
id: fd4723c9197251786eed03b97dd285bf15d0c0c487f8c4af2ea8d28de135cc5a
title: Enabling Forwarding When Using firewalld
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/runtime-fabric/2.9/prereq-firewalld-forwarding.md
canonical_url: https://docs.mulesoft.com/runtime-fabric/2.9/prereq-firewalld-forwarding
source_site: docs.mulesoft.com
content_type: documentation
content_hash: ec93df4625ad917e3ac13e189b0e786e8d189504c077908a750b84e4a1bcb68e
description: MuleSoft Documentation Site
release: "2.9"
latest: false
---
---
product: Runtime Fabric
version: 2.9
---

# Enabling Forwarding When Using firewalld

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

`firewalld` is an iptables controller that defines rules for persistent network traffic. If you are
using `firewalld` with a Red Hat Enterprise Linux (RHEL) 7.x operating system, you must enable
forwarding on the docker0 device. You must also forward any packets being sent from or to the
10.0.0.0/8 subnet.

## To Determine if You Are Using firewalld

To determine if your system is using firewalld, run the following command:

```copy
systemctl status firewalld.service
```

If firewalld is installed, this command returns the following:

```copy
$ sudo systemctl status firewalld.service
* firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: inactive (dead)
Docs: man:firewalld(1)
```

If \`firewalld is not installed, this command returns an error message.

## Enable Forwarding

To enable forwarding on the docker0 device, run the following commands:

```copy
firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 1 -o docker0 -j ACCEPT -m comment --comment "docker subnet"

firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 1 -s 10.0.0.0/8 -j ACCEPT -m comment --comment "docker subnet"
```

To enable forwarding on the 10.0.0.0/8 subnet, run the following commands:

```copy
firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 1 -s 10.0.0.0/8 -j ACCEPT -m comment --comment "docker subnet"

firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 1 -d 10.0.0.0/8 -j ACCEPT -m comment --comment "docker subnet"
```

## Verify Forwarding

To verify that forwarding rules are in place, run the following command:

```copy
firewall-cmd --permanent --direct --get-all-rules
```

The output should look like the following example:

ipv4 filter FORWARD 1 -o docker0 -j ACCEPT -m comment --comment 'docker subnet' ipv4 filter FORWARD
1 -s 10.0.0.0/8 -j ACCEPT -m comment --comment 'docker subnet' ipv4 filter INPUT 1 -s 10.0.0.0/8 -j
ACCEPT -m comment --comment 'docker subnet' ipv4 filter INPUT 1 -d 10.0.0.0/8 -j ACCEPT -m comment
--comment 'docker subnet'

> [!IMPORTANT] These rules are node level. This means you must run and verify them on every node,
> both controller and worker nodes, for Runtime Fabric to work correctly when firewalld is active.