firewalld-users October 2016

firewalld-users@lists.fedorahosted.org

2 participants
3 discussions

Samba broken after firewalld update
by Giovanni Santini 14 Dec '16

14 Dec '16

Good morning, I am contacting you as I have a weird issue. I upgraded firewalld from 4.1.2 to 4.3.3; in 4.1.2 I never had problems with Samba shares, but, with the last update, I can't access my Samba server. I tried disabling and re-enabling the samba service in the firewalld configuration, but I didn't have success. The only way I can access my Samba server is to disable firewalld... I can't figure out why it won't work using the proper service. Thanks in advance. -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://github.com/ItachiSan My code, again: https://gitlab.com/u/ItachiSan My Twitter: https://twitter.com/santini__gio My Facebook: https://www.facebook.com/giovanni.santini My Google+: https://plus.google.com/+GiovanniSantini/ My GPG: 2FADEBF5

2 13

Can someone tell me how to set firewalld as a kill switch for openvpn?
by Jake Trader 30 Oct '16

30 Oct '16

Clueless newbie here If someone can tell me how to set firewalld as a kill switch for openvpn I would really appreciate

3 4

Verifying whether Drop zone is applied by Firewalld
by nitinsk43＠gmail.com 12 Oct '16

12 Oct '16

Hello All, I've just installed Fedora 24 and wanted to enable firewall on my laptop, for personal use. While trying to discover features/options available in FirewallD, I changed the default zone "FedoraWorstation" to "Drop" zone using the GUI, as I wanted to block/drop all incoming traffic while allowing outgoing connections and maintaining their states. I do not know much about Iptables. Could you please take a look at the output of "iptables -L" and let me know if "Drop" zone policy is applied properly and that it meets my requirement ? A short description of what you think would be just enough. Thank you and I appreciate your help. Here is the output of "iptables -L" : Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ctstate RELATED,ES TABLISHED ACCEPT all -- anywhere anywhere INPUT_direct all -- anywhere anywhere INPUT_ZONES_SOURCE all -- anywhere anywhere INPUT_ZONES all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere DROP all -- anywhere anywhere ctstate INVALID REJECT all -- anywhere anywhere reject-with icmp-h ost-prohibited Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere ctstate RELATED,ES TABLISHED ACCEPT all -- anywhere anywhere FORWARD_direct all -- anywhere anywhere FORWARD_IN_ZONES_SOURCE all -- anywhere anywhere FORWARD_IN_ZONES all -- anywhere anywhere FORWARD_OUT_ZONES_SOURCE all -- anywhere anywhere FORWARD_OUT_ZONES all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere DROP all -- anywhere anywhere ctstate INVALID REJECT all -- anywhere anywhere reject-with icmp-h ost-prohibited Chain OUTPUT (policy ACCEPT) target prot opt source destination OUTPUT_direct all -- anywhere anywhere Chain FORWARD_IN_ZONES (1 references) target prot opt source destination FWDI_drop all -- anywhere anywhere FWDI_drop all -- anywhere anywhere Chain FORWARD_IN_ZONES_SOURCE (1 references) target prot opt source destination Chain FORWARD_OUT_ZONES (1 references) target prot opt source destination FWDO_drop all -- anywhere anywhere FWDO_drop all -- anywhere anywhere Chain FORWARD_OUT_ZONES_SOURCE (1 references) target prot opt source destination Chain FORWARD_direct (1 references) target prot opt source destination Chain FWDI_drop (2 references) target prot opt source destination FWDI_drop_log all -- anywhere anywhere FWDI_drop_deny all -- anywhere anywhere FWDI_drop_allow all -- anywhere anywhere DROP all -- anywhere anywhere Chain FWDI_drop_allow (1 references) target prot opt source destination Chain FWDI_drop_deny (1 references) target prot opt source destination Chain FWDI_drop_log (1 references) target prot opt source destination Chain FWDO_drop (2 references) target prot opt source destination FWDO_drop_log all -- anywhere anywhere FWDO_drop_deny all -- anywhere anywhere FWDO_drop_allow all -- anywhere anywhere DROP all -- anywhere anywhere Chain FWDO_drop_allow (1 references) target prot opt source destination Chain FWDO_drop_deny (1 references) target prot opt source destination Chain FWDO_drop_log (1 references) target prot opt source destination Chain INPUT_ZONES (1 references) target prot opt source destination IN_drop all -- anywhere anywhere IN_drop all -- anywhere anywhere Chain INPUT_ZONES_SOURCE (1 references) target prot opt source destination Chain INPUT_direct (1 references) target prot opt source destination Chain IN_drop (2 references) target prot opt source destination IN_drop_log all -- anywhere anywhere IN_drop_deny all -- anywhere anywhere IN_drop_allow all -- anywhere anywhere DROP all -- anywhere anywhere Chain IN_drop_allow (1 references) target prot opt source destination Chain IN_drop_deny (1 references) target prot opt source destination Chain IN_drop_log (1 references) target prot opt source destination Chain OUTPUT_direct (1 references) target prot opt source destination Regards, Nitink

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users October 2016