firewalld-users July 2024

firewalld-users@lists.fedorahosted.org

3 participants
2 discussions

Start a nNew thread

enable & disable policy after define
by ossa mazi 17 Jul '24

17 Jul '24

Hi after policy defines how to enable & disable it without delete.

2 1

Zone inheritance?
by Chris Adams 14 Jul '24

14 Jul '24

Is there a way to inherit config from one zone to another? For a simple example, lets say I have a "public" zone that allows services http/https. Now I want some developers to have access to mysql from a static IP/subnet. I can make a new "developer" zone that allows service mysql and add their IPs/subnets as sources, but unless I also http/https, they'll lose web access. I know I can do this with rich rules in "public", but that's harder to manage (and feels more like short-circuiting firewalld). I can add the same services as "public" to "developer", but now I have to manage that service list in each zone. It'd be nice to be able to have "developer" inherit services from "public", or make it a sub-zone of "public", or something like that. That way, managing developer IPs is just add/remove on the "developer" zone, while managing general services is still just add/remove on the "public" zone. -- Chris Adams <linux(a)cmadams.net>

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

firewalld-users July 2024