Matthew Miller (mattdm(a)fedoraproject.org) said:
On Tue, Nov 13, 2012 at 06:37:37PM +0100, Thomas Woerner wrote:
> >That's not correct. You can modify the firewall just fine without
> >restarting it.
> This is related to system-config-firewall/lokkit. You are right, if
> you are using iptables directly then you do not have this
> limitation. firewalld is a replacement for s-c-fw/lokkit.
This is not what it says in the feature page at
https://fedoraproject.org/wiki/Features/firewalld-default#Detailed_Descri...
That says:
The services iptables, iptables-ipv6 and ebtables will be replaced by
firewalld. system-config-firewall in it's [sic] current form will also be
replaced.
Replaced in the default configuration - you obviously shouldn't be running
firewalld and the static firewall scripts at the same time, so enabling them
in combination would be a bad idea.
Bill