On Tue, Nov 13, 2012 at 06:37:37PM +0100, Thomas Woerner wrote:
>That's not correct. You can modify the firewall just fine
without
>restarting it.
This is related to system-config-firewall/lokkit. You are right, if
you are using iptables directly then you do not have this
limitation. firewalld is a replacement for s-c-fw/lokkit.
This is not what it says in the feature page at
https://fedoraproject.org/wiki/Features/firewalld-default#Detailed_Descri...
That says:
The services iptables, iptables-ipv6 and ebtables will be replaced by
firewalld. system-config-firewall in it's [sic] current form will also be
replaced.
--
Matthew Miller ☁☁☁ Fedora Cloud Architect ☁☁☁ <mattdm(a)fedoraproject.org>