firewalld-users February 2014

firewalld-users@lists.fedorahosted.org

3 participants
3 discussions

INPUT_direct chain
by Jorge Fábregas 21 Jul '14

21 Jul '14

Hi, What's the purpose of the *INPUT_direct* custom-chain in the filter/INPUT chain? Is this the recommended chain to use when inserting custom rules via the --direct option? Is it sort of like, to keep things organized? Thanks, Jorge

9 28

logging rejected packets
by Christian Lupien 17 Feb '14

17 Feb '14

Hi I just recently converted my iptables rules to firewalld. Most of it was straightforward. However I had trouble with trying to log my rejected packets. My old /etc/sysconfig/iptables INPUT chain ended with -A INPUT -m limit --limit 6/hour --limit-burst 10 -j LOG -A INPUT -j REJECT --reject-with icmp-host-prohibited Is there a simple way to do this with firewalld? If not could it be implemented. I find that logging rejected packets can sometimes help find trouble with the firewall setup. I was able to find a work around with some direct passthrough entries, but it is fragile (depends on the current firewalld entries creation order and naming structure). Thanks Christian

2 1

firewalld 0.3.9.3
by Jiri Popelka 05 Feb '14

05 Feb '14

Hi, here's 0.3.9.3 https://fedorahosted.org/released/firewalld/firewalld-0.3.9.3.tar.bz2 sha1sum: d9ad8d9fc335e691a7deeb4be7346b5956ef7650 It fixes two more regressions introduced with 0.3.9: - broken persistent port forwarding (RHBZ#1056154) - not allowing Router Advertisements with IPv6_rpfilter (RHBZ#1058505) one regression introduced with 0.3.4: - default zone rules being applied to all zones (RHBZ#1057875) and some more bug-fixes, like RHBZ#1055190 Hopefully we'll be more lucky with future releases than we were with 0.3.9 (which introduced some regressions). -- Jiri

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users February 2014