firewalld-users December 2016

firewalld-users@lists.fedorahosted.org

6 participants
5 discussions

use different zones for IPv4 and IPv6 on the same interface
by Dick Marinus 30 Dec '16

30 Dec '16

At home I have a server running Fedora 25 which I'm using for routing my internet connection, mail server etc. I'm using a sixxs IPv6 tunnel for IPv6 connectivity and I'm using a internet routed IPv6 subnet from sixxs on my home network. Now the trouble starts; I've configured an IPv6 address from the IPv6 subnet on my (home) network interface which is connected to my home network and I'd like to have different rules for internal and external hosts but this interface has zone "internal" for IPv4 and it should be labelled "external" for IPv6. I've tried working around this by adding a rich rule to drop all IPv6 traffic from the zone public (this works) but I cannot add allow rules because the allow rules seem to be handled after the deny rules... Whould it be possible to use different zones for IPv4 and IPv6 on the same interface? Is is possible to change the allow / deny order for the public zone? If this isn't possible I guess I should add a VLAN for IPv6 to have different interfaces for IPv4/6

1 0

Multihoming with firewalld
by Jérôme AVOND 29 Dec '16

29 Dec '16

Hello, Is firewalld intended to multihoming like shorewall ? e.g. : http://shorewall.net/manpages/shorewall-providers.html If yes, where is the documentation about this , Regards, -- <https://www.april.org/rejoignez-la-rebellion-adherez-lapril> Jérôme Avond - aka jadjay Agitateur chez Alolise depuis avril 2005 ... et président depuis 2014 mail/xmpp: jerome.avond(a)alolise.org mobile: 0661469785 chatons <http://chatons.org> Alolise est membre du collectif C.H.A.T.O.N.S <http://chatons.org>

1 0

firewall-config not functional on CentOS 7 KDE
by Emmett Culley 23 Dec '16

23 Dec '16

I am not able to select services to be allowed for any zone. None of the check boxes are checked, even though I know from looking into iptables (iptables -nvL), that some services are enabled. And clicking on any check box does not cause the box to be checked. It seems I ran into this awhile ago as it is OK on two of my servers and I remember doing something to fix it. No amount of googling turns up the email thread I started on the centos mailing list. Does anyone know that the issue is? Could it be related to GTK not always being compatible with QT? Emmett

1 0

Samba broken after firewalld update
by Giovanni Santini 14 Dec '16

14 Dec '16

Good morning, I am contacting you as I have a weird issue. I upgraded firewalld from 4.1.2 to 4.3.3; in 4.1.2 I never had problems with Samba shares, but, with the last update, I can't access my Samba server. I tried disabling and re-enabling the samba service in the firewalld configuration, but I didn't have success. The only way I can access my Samba server is to disable firewalld... I can't figure out why it won't work using the proper service. Thanks in advance. -- Giovanni Santini My blog: http://giovannisantini.tk My code: https://github.com/ItachiSan My code, again: https://gitlab.com/u/ItachiSan My Twitter: https://twitter.com/santini__gio My Facebook: https://www.facebook.com/giovanni.santini My Google+: https://plus.google.com/+GiovanniSantini/ My GPG: 2FADEBF5

2 13

Reintroduce Firewall GTK+ Applet
by poma 13 Dec '16

13 Dec '16

Current Firewall Applet - Qt5 based, has too many unnecessary dependencies. For those using GTK+ based Desktop Environments there is a very elegant solution, reintroduction of the Firewall GTK+ Applet. Not only that GKT+ based Applet works just as well as its Qt5 counterpart, but it also provides genuine GTK+ Look and Feel within modern GTK+ Desktop. Ref. https://bugzilla.redhat.com/show_bug.cgi?id=1404328

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users December 2016