firewalld-users September 2015

firewalld-users@lists.fedorahosted.org

1 participants
2 discussions

Errors with dbus
by What you get is Not what you see 01 Sep '15

01 Sep '15

Hi I have been getting error messages on syslog after giving some firewalld commands. This must be about dbus integration of firewalld. Could you help? My system is Centos 7.1 minimal. dbus[125]: [system] Rejected send message, 0 matched rules; type="error", sender=":1.53" (uid=0 pid=6445 comm="/usr/bin/python -Es /usr/sbin/ firewalld --nofork -") interface="(unset)" member="(unset)" error name="org.freedesktop.DBus.Error.ServiceUnknown" requested_reply="0" destination=":1.145" (uid=0 pi d=8803 comm="/usr/bin/python -Es /bin/firewall-cmd --list-all-z

2 1

Services questions
by Robert Moskowitz 01 Sep '15

01 Sep '15

For the past year, I just kind of hacked along with small things with firewalld. But now I am configuring a Samba AD and that means lots of rules. See: https://wiki.samba.org/index.php/Samba_AD_DC_port_usage I am trying really hard to stay with firewalld services and only do ports where I have to. So right away I see a few things: Why is the ldap service tcp only? # cat /usr/lib/firewalld/services/ldap.xml <?xml version="1.0" encoding="utf-8"?> <service> <short>LDAP</short> <description>Lightweight Directory Access Protocol (LDAP) server</description> <port protocol="tcp" port="389"/> </service> Seems this should also include udp. Whereas mDNS is the flip. It has udp, but should also include tcp. Both of these I CAN handle with add-port, but wonder if the service rule is really set up wrong. One would expect these two services to be open for both ucp and tcp. Not one or the other. Finally I am suppose to enable "Dynamic RPC ports" which is 1024 - 5000 and I cannot find any guidance on setting that one up. Otherwise, an interesting service and one I am slooooowly learning. thanks

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users September 2015