On Tue, Apr 17, 2012 at 10:40 PM, Reindl Harald <h.reindl(a)thelounge.net> wrote:
Hi
one question before decisions are nailed down
http://fedoraproject.org/wiki/Features/firewalld-default
> An explicit transition is planned after Fedora 18 with dropping support for the
> static firewall with system-config-firewal/lokkit. A migration from the static
> firewall model will be needed then.
are there only the ui-interfaces meant or do someone
consider drop "iptbales.service" at all? if so please
re-consider this!
I was pushing for the deprecation to avoid a NetworkManager-like
duplication for the long term.
AFAICS you can s/iptables/firewall-cmd --direct --passthrough ipv4/,
and things should continue to work (perhaps with minor modifications
to avoid collisions with firewalld's default rule chains).
Or, if you insist, disable firewalld (... which might break some
applications), and turn your shell script into a systemd service; but
--direct --passthrough should be the preferred route.
Mirek