Firewalld and network namespaces (containers)
by Anders Blomdell
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi, I'm fiddling with network namespaces and need to set up
masquerading for virtual ethernets (veth1 in container, veth0
in main namespace). While firewalld is running this can be done with
(which works nicely on systems without firewalld as well):
iptables -t filter -I FORWARD -i veth0 -j ACCEPT
iptables -t nat -I POSTROUTING -j MASQUERADE
but those changes are lost when firewalld is reloaded. Is there any
documentation on how to get the DBUS-messages when firewalld is reloaded
(preferably python :-)) or is there a better way?
Regards
Anders Blomdell
- --
Anders Blomdell Email: anders.blomdell(a)control.lth.se
Department of Automatic Control
Lund University Phone: +46 46 222 4625
P.O. Box 118 Fax: +46 46 138118
SE-221 00 Lund, Sweden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJTXqV3AAoJENZYyvaDG8NcjMsH/3C+wR4WwkFyaKkkjKN2YGvB
IXMIOqqrloPCcqpSzaLiA3GX5RDkIrbQDrWph73gHiU4+cVt1/zpp2ES0CL/JrQL
Iw0BiU5FhyHCl86O9h3RlR5nkoNgzrVeLzQTtKQbdIraDmHD0ieDeKiqrWuq0eKn
lnpmaN//cFfs8aNWgLiv9qxokvERauqkrcLn37nDKDpLhy+K82psmRZ0WJXGc9nV
pW3zASAP/dwYuhu0/hlzI9uuwwxIIWJfxWK7Y9KWQWlvyvf0EWzqjEEiYqRyy4Gx
dYTwroSOG25r2VYw4qxRZkZyagK67dWMojyVF3SIx8/zuiArx6YWQEysIeR0zrw=
=hayR
-----END PGP SIGNATURE-----
9 years, 11 months
Permanent Changes
by Justin Brown
I'm trying to add a few services to the permanent configuration of a
zone using Python. I've gone over the DBus interface quite
extensively, but I can't figure out how to make
/org/fedoraproject/FirewallD1 addService() persistent.
I thought that /org/fedoraproject/FirewallD1/config addService() might
be correct, but the method doesn't seem to work (testing in
qdbusviewer) and has a drastically different method definition:
<method name="addService">
<arg direction="in" type="s" name="service"/>
<arg direction="in" type="(sssa(ss)asa{ss})" name="settings"/>
<arg direction="out" type="o"/>
</method>
1) Is there a way through DBus to make a change permanent?
2) If not, how do I make permanent changes to a zone without using
firewall-cmd shell commands?
Thanks,
Justin
10 years
Fedora repository with testing firewalld builds
by Jiri Popelka
It's been 2 months since 0.3.9.3 release, so I think it's time for
another one.
Given that 0.3.9 wasn't quite a success - it introduced some regressions
which have been fixed with follow-up 0.3.9.x releases - I've been thinking
about how can we improve this and the first idea is doing a
release-candidates (or whatever you call it).
If you're interested in testing and you use Fedora, then it's piece of
cake, just
grab one of .repo files from
https://copr.fedoraproject.org/coprs/jpopelka/FirewallD/
copy it into /etc/yum.repos.d/ and run 'yum update'.
Yum will offer you to update to build of snapshot of upstream git
repository.
I'll be glad for any response, thanks !
--
Jiri
10 years