firewalld-users March 2012

firewalld-users@lists.fedorahosted.org

4 participants
3 discussions

Proper way to change zones?
by Patrick 05 Apr '12

05 Apr '12

Hello! I am trying to make use of firewalld now that I am in F17, but documentation is slim :). I have created a zone xml file in /usr/local/lib/firewalld/zones/ and added some services to /usr/local/lib/firewalld/services/ . I have then linked them to the appropriate folders in /etc/firewalld. Even after reloading firewalld, it does not list my new zone when I issue the command firewall-cmd --get-zones. I have set my interface to use my new zone in the appropriate /etc/sysconfig/network-scripts file. Now when I issue firewall-cmd --get-zone-of-interface=eth0 I get no output, instead of "public," which was the zone it used to receive by default. If I issue "nmcli -f NAME,DEVICES,ZONE con status" it lists my new zone, so I guess that is something :). Am I doing this all wrong?! Thank you for any assistance, Patrick

2 3

FirewallD Rule for Port and Interface
by Scott Talbert 04 Apr '12

04 Apr '12

Hi, I have been looking at firewalld in Fedora 17 in order to understand how to convert an iptables command that I use in a script into a firewalld one. The iptables command that I'm using is: iptables -I INPUT -p udp -i $INTERFACE --dport 67 -j ACCEPT With firewalld-cmd I can do: firewall-cmd --add --port=67/udp But there doesn't seem to be a way for me to specify an interface as well? As in, I only want to open UDP port 67 on a specific network interface, not all interfaces. Thanks, Scott

2 1

Testing firewalld
by dobu 26 Mar '12

26 Mar '12

Hi, I'm using Fedora 17 (alpha) at the moment and was interested in testing out the firewalld. It works so far, but I still have a few questions and couldn't find much documentation (except for Developers). *) Why should I change from ip*tables (with the system-config-firewall front-end) to firewalld as an end-user? So far it seems to me, that without a GUI (I wouldn't count the firewall-applet as a proper GUI) it is way harder to configure. *) My home network consists of 2 laptops with fedora and one Macbook. I've placed my laptops into the 'home' zone. Now I wanted to share some files and used samba. I added the service, but next day it didn't work anymore. Do I really have to enable samba everytime I reboot the system with 'firewall-cmd --add --zone=home --service=samba'? How can I add a service permanently to a zone? Sorry if that's a stupid question but I couldn't find anything about that. *) I really, really love the zone idea. I hope the firewall-config tool, that is mentioned in the Fedora Feature Page, will be in the repository soon. *) The firewall-applet doesn't do much at the moment, does it? Shouldn't the .desktop file be hidden, so it doesn't show up in the Applications (that's more a package maintainer problem, I guess)? Well, that's it for now. I will be using it for a while and report bugs if I stumble over one. So far no problems in standard usage (that means no network printer, just casual home-user). dobu

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users March 2012