Viewing the Linux Firewall page in Webmin shows these two messages near the top:
External managed rules detected. Activate “[Directly edit firewall rules”] or your firewall rules may break.
Warning! It appears that Shorewall is being used to generate your system’s firewall. Maybe you should use the [Shoreline Firewall module] instead.
Shorewall Firewall has never been used on this server. Not sure how to resolve these issues. I only want to use the iptables firewall. Is there some file I should look for and perhaps delete that is causing it to think “External managed rules detected”?
Forgot to mention that the Linux Firewall and Linux IP6 Firewall modules are listed in the Un-used Modules list and Refresh Modules process does not fix that. Also cannot successfully move those two modules in Reassign Modules configuration option. It lets me specify a different category for those modules but then nothing actually changes.
Yes, I know that Centos 7 is EOL but it is a big deal to upgrade. Have to move to Rocky and there is no simple way to do that. Best way is to spin up a new server, install Rocky, and recreate / move everything including modifying code to work with newer versions of all the packages I use. Then test it all. I have done that for one of my servers but it is very time consuming, even using Gemini to help identify and modify the code changes that are needed.
Yes it is work to move to a new OS for sure.
I have no Idea what customization you have done and what you need to do to get that to work on new Rocky Linux.
No advice I have to give for current problem as I do not have Centos 7 to test on
Yes, I should uninstall Shorewall. The problem however is that Webmin seems to think iptables (Linux Firewall) is not installed or not used when it clearly is. I can launch it but only from the Un-used Modules list and I can’t seem to be able to move it to the Networking category in Webmin. Seems odd to me. I have never used or needed to uninstall Shorewall from any of my other servers.
Er, actually, I guess it doesn’t matter. If Shorewall exists, Webmin assumes you installed it for a reason (it’s not part of the default OS install and there’s no reason to install it if you’re not using it).
The Shorewall module just looks for the shorewall command:
I saw the same warning once on CentOS 7. It was caused by some old Shorewall config files left in /etc/shorewall even though it wasn’t active. After removing those and restarting Webmin, the message went away. Might be worth checking if any leftover configs are there.