firewalld-users October 2014

firewalld-users@lists.fedorahosted.org

9 participants
12 discussions

Enabling by MAC address
by Geoffrey Leach 04 Oct '14

04 Oct '14

First, let it be known that I am completely ignorant of the principles of operation of firewallD, and hope to remain so. that said, I have a device (known to wok Silicon Dust HD Home Run) that is hard-wired to the ethernet port on another system. Installing Fedora 19 has interfered with this. In order to open the firewall to this connection, I have followed the advice of Michael Hannon (https://lists.fedoraproject.org/pipermail/users/2013-December/444034.html) and have constructed /etc/firewalld/direct.xml as follows: <?xml version="1.0" encoding="utf-8"?> <direct> <passthrough ipv="ipv4">-t filter -A IN_internal_allow -m mac --mac-source 00:18:DD:01:4A:E7 j ACCEPT</passthrough> </direct> This did not suddenly fix the connection problem :-), but it would be nice to be able to validate this. Using firewall-cmd to reload firewalld resulted in no errors but what do I know? So, the intended function of this code is to open the firewall to connections involving the device with MAC address 00:18:DD:01:4A:E7. Is that correct? Should I be able to find this somewhere in the firewall-config menus? Thanks.

2 12

firewalld and kvm
by Rob Verduijn 01 Oct '14

01 Oct '14

Hello, I was wondering if anybody could tell me how to set up firewalld together with kvm. For example a fedora 20 host running a centos6.5 guest. The guest is using bridge0 which is connected to eth0. What devices do I need to which zone. Do the virtual devices like vnet1 and vnet2 need to be added to a zone ? I keep running into walls here (firewalls to be precise), the only thing I can find on this subject is 'switch back to iptables'. But I would like to know how to fix this with firewalld. Anybody who has any ideas on this ? Cheers Rob

1 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users October 2014