Anybody if there's a way to configure port forwarding like you can do services with the XML file?
------------------------------ Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134 ------------------------------
Domo... But, I don't see it showing up in the services after I reload FirewallD in `--get-services`.
/etc/firewalld/zones/splunknet.xml: <?xml version="1.0" encoding="utf-8"?> <zone version="1.0" target="ACCEPT"> <service name="netsplunk"> <short>Splunk SYSLOG Forward</short> <forward-port port="514" protocol="udp" to-port="1516"/> </zone>
------------------------------ Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134 ------------------------------
On Thu, Sep 6, 2018 at 4:07 AM Eric Garver egarver@redhat.com wrote:
On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote:
Anybody if there's a way to configure port forwarding like you can do services with the XML file?
Yes! You can add almost anything to a zone XML file manually. See man page for firewalld.zone. _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
On Thu, Sep 06, 2018 at 02:59:25PM -1000, Boyd Ako wrote:
Domo... But, I don't see it showing up in the services after I reload FirewallD in `--get-services`.
Maybe try "--permanent --get-services".
/etc/firewalld/zones/splunknet.xml:
<?xml version="1.0" encoding="utf-8"?>
<zone version="1.0" target="ACCEPT"> <service name="netsplunk"> <short>Splunk SYSLOG Forward</short> <forward-port port="514" protocol="udp" to-port="1516"/> </zone>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Thu, Sep 6, 2018 at 4:07 AM Eric Garver egarver@redhat.com wrote:
On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote:
Anybody if there's a way to configure port forwarding like you can do services with the XML file?
Yes! You can add almost anything to a zone XML file manually. See man page for firewalld.zone. _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
Nope that didn't do anything...
How are the zone config files handled?
I did put it in the right place right?
------------------------------ Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134 ------------------------------
On Fri, Sep 7, 2018 at 4:48 AM Eric Garver egarver@redhat.com wrote:
On Thu, Sep 06, 2018 at 02:59:25PM -1000, Boyd Ako wrote:
Domo... But, I don't see it showing up in the services after I reload FirewallD in `--get-services`.
Maybe try "--permanent --get-services".
/etc/firewalld/zones/splunknet.xml:
<?xml version="1.0" encoding="utf-8"?>
<zone version="1.0" target="ACCEPT"> <service name="netsplunk"> <short>Splunk SYSLOG Forward</short> <forward-port port="514" protocol="udp" to-port="1516"/> </zone>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Thu, Sep 6, 2018 at 4:07 AM Eric Garver egarver@redhat.com wrote:
On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote:
Anybody if there's a way to configure port forwarding like you can do services with the XML file?
Yes! You can add almost anything to a zone XML file manually. See man page for firewalld.zone. _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to
firewalld-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos... _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
On Fri, Sep 07, 2018 at 02:01:31PM -1000, Boyd Ako wrote:
Nope that didn't do anything...
How are the zone config files handled?
I did put it in the right place right?
You added a ZONE file, but were using --get-services. services != zones. After a firewalld reload try:
# firewall-cmd --permanent --get-zones
You'll have to add the interface or source address before traffic goes to the zone though.
# firewall-cmd --permanent --zone=plunknet --add-interface=<your interface> or # firewall-cmd --permanent --zone=plunknet --add-source=<your subnet>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Fri, Sep 7, 2018 at 4:48 AM Eric Garver egarver@redhat.com wrote:
On Thu, Sep 06, 2018 at 02:59:25PM -1000, Boyd Ako wrote:
Domo... But, I don't see it showing up in the services after I reload FirewallD in `--get-services`.
Maybe try "--permanent --get-services".
/etc/firewalld/zones/splunknet.xml:
<?xml version="1.0" encoding="utf-8"?>
<zone version="1.0" target="ACCEPT"> <service name="netsplunk"> <short>Splunk SYSLOG Forward</short> <forward-port port="514" protocol="udp" to-port="1516"/> </zone>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Thu, Sep 6, 2018 at 4:07 AM Eric Garver egarver@redhat.com wrote:
On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote:
Anybody if there's a way to configure port forwarding like you can do services with the XML file?
Yes! You can add almost anything to a zone XML file manually. See man page for firewalld.zone. _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to
firewalld-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos... _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
It's not like the other network zones? Because I don't want to change that or have to recreate the the rules they already have.
Sent from my iPhone
On Sep 8, 2018, at 02:45, Eric Garver egarver@redhat.com wrote:
On Fri, Sep 07, 2018 at 02:01:31PM -1000, Boyd Ako wrote: Nope that didn't do anything...
How are the zone config files handled?
I did put it in the right place right?
You added a ZONE file, but were using --get-services. services != zones. After a firewalld reload try:
# firewall-cmd --permanent --get-zones
You'll have to add the interface or source address before traffic goes to the zone though.
# firewall-cmd --permanent --zone=plunknet --add-interface=<your interface> or # firewall-cmd --permanent --zone=plunknet --add-source=<your subnet>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Fri, Sep 7, 2018 at 4:48 AM Eric Garver egarver@redhat.com wrote:
On Thu, Sep 06, 2018 at 02:59:25PM -1000, Boyd Ako wrote: Domo... But, I don't see it showing up in the services after I reload FirewallD in `--get-services`.
Maybe try "--permanent --get-services".
/etc/firewalld/zones/splunknet.xml:
<?xml version="1.0" encoding="utf-8"?>
<zone version="1.0" target="ACCEPT"> <service name="netsplunk"> <short>Splunk SYSLOG Forward</short> <forward-port port="514" protocol="udp" to-port="1516"/> </zone>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Thu, Sep 6, 2018 at 4:07 AM Eric Garver egarver@redhat.com wrote:
On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote: Anybody if there's a way to configure port forwarding like you can do services with the XML file?
Yes! You can add almost anything to a zone XML file manually. See man page for firewalld.zone. _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to
firewalld-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos... _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
On Sat, Sep 08, 2018 at 10:13:34AM -1000, Boyd H. Ako wrote:
It's not like the other network zones?
It's exactly like other zones.
I think I misunderstood your original goal. I think you want to add "forward-ports" to a service definition. That's not supported. You'll have to manually add the "forward-port" to the relevant zone.
Because I don't want to change that or have to recreate the the rules they already have.
Sent from my iPhone
On Sep 8, 2018, at 02:45, Eric Garver egarver@redhat.com wrote:
On Fri, Sep 07, 2018 at 02:01:31PM -1000, Boyd Ako wrote: Nope that didn't do anything...
How are the zone config files handled?
I did put it in the right place right?
You added a ZONE file, but were using --get-services. services != zones. After a firewalld reload try:
# firewall-cmd --permanent --get-zones
You'll have to add the interface or source address before traffic goes to the zone though.
# firewall-cmd --permanent --zone=plunknet --add-interface=<your interface> or # firewall-cmd --permanent --zone=plunknet --add-source=<your subnet>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Fri, Sep 7, 2018 at 4:48 AM Eric Garver egarver@redhat.com wrote:
On Thu, Sep 06, 2018 at 02:59:25PM -1000, Boyd Ako wrote: Domo... But, I don't see it showing up in the services after I reload FirewallD in `--get-services`.
Maybe try "--permanent --get-services".
/etc/firewalld/zones/splunknet.xml:
<?xml version="1.0" encoding="utf-8"?>
<zone version="1.0" target="ACCEPT"> <service name="netsplunk"> <short>Splunk SYSLOG Forward</short> <forward-port port="514" protocol="udp" to-port="1516"/> </zone>
Thank you for your time,
Boyd H. Ako
boyd.hanalei.ako@gmail.com https://www.boydhanaleiako.me Cell Phone: (424) 244-9653PGP/GPG Public Key: https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
On Thu, Sep 6, 2018 at 4:07 AM Eric Garver egarver@redhat.com wrote:
> On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote: > Anybody if there's a way to configure port forwarding like you can do > services with the XML file?
Yes! You can add almost anything to a zone XML file manually. See man page for firewalld.zone. _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to
firewalld-users-leave@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos... _______________________________________________ firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users mailing list -- firewalld-users@lists.fedorahosted.org To unsubscribe send an email to firewalld-users-leave@lists.fedorahosted.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedorahos...
firewalld-users@lists.fedorahosted.org
-
Boyd Ako -
Boyd H. Ako
-
Eric Garver