firewalld-users September 2013

firewalld-users@lists.fedorahosted.org

3 participants
3 discussions

firewalld-0.3.5
by Jiri Popelka 02 Oct '13

02 Oct '13

Hi all, exactly after 2 months after 0.3.4 we've released 0.3.5, which contains lots of bug-fixes. https://fedorahosted.org/released/firewalld/firewalld-0.3.5.tar.bz2 Enjoy ! -- Jiri

1 1

Changelog - FirewallD 3.5-1
by poma 30 Sep '13

30 Sep '13

Changelog - FirewallD 3.5-1 * Mon Sep 30 2013 Jiri Popelka <jpopelka(a)redhat.com> - 0.3.5-1 - Only use one PK action for configuration (RHBZ#994729) - firewall-cmd: indicate non-zero exit code with red color - rich-rule: enable to have log without prefix & log_level & limit - log-level warn/err -> warning/error (RHBZ#1009436) - Use policy DROP while reloading, do not reset policy in restart twice - Add _direct chains to all table and chain combinations - documentation improvements - New firewalld.direct(5) man page docbook source - tests/firewall-cmd_test.sh: make rich language tests work - Rich_Rule._import_from_string(): improve error messages (RHBZ#994150) - direct.passthrough wasn't always matching out_signature (RHBZ#967800) - firewall-config: twist ICMP Type IP address family logic. - firewall-config: port-forwarding/masquerading dialog (RHBZ#993658) - firewall-offline-cmd: New --remove-service=<service> option (BZ#969106) - firewall-config: Options->Lockdown was not changing permanent. - firewall-config: edit line on doubleclick (RHBZ#993572) - firewall-config: System Default Zone -> Default Zone (RHBZ#993811) - New direct D-Bus interface, persistent direct rule handling, enabled passthough - src/firewall-cmd: Fixed help output to use more visual parameters - src/firewall-cmd: New usage output, no redirection to man page anymore - src/firewall/core/rich.py: Fixed forwad port destinations - src/firewall-offline-cmd: Early enable/disable handling now with mask/unmask - doc/xml/firewalld.zone.xml: Added more information about masquerade use - Prefix to log message is optional (RHBZ#998079) - firewall-cmd: fix --permanent --change-interface (RHBZ#997974) - Sort zones/interfaces/service/icmptypes on output. - wbem-https service (RHBZ#996668) - applet&config: add support for KDE NetworkManager connection editor - firewall/core/fw_config.py: New method update_lockdown_whitelist - Added missing file watcher for lockdown whitelist in config D-Bus interface - firewall/core/watcher: New add_watch_file for lockdown-whitelist and direct - Make use of IPv6 NAT conditional, based on kernel number (RHBZ#967376) poma Ref. https://git.fedorahosted.org/cgit/firewalld.git/tree/firewalld.spec#n183

1 0

Specifying allowed source ports
by Sergio Villar Senin 12 Sep '13

12 Sep '13

Hi, sometimes is useful to allow connections from a specific combination of of source_address:source_port. For example if you want to allow the icecream[1] autodiscovery service in your local network you would likely want to allow connections coming from: 192.168.1.0/24:8765 udp I think this is a very common use case in local networks where you have services running in well-known ports that use random ports in your local machine to setup connections. Is there any way to do that in firewalled? BR [1] https://github.com/icecc/icecream

2 7

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users September 2013