On 08/16/2013 01:36 PM, Victor Rafael Escobar Olmos wrote:
... so this lack of interface to assign the zone for NetworkManager was a bit contrasting with the rest of the parameters to configure the firewall.
Actually there is a way to achieve something similar: firewall-cmd --permanent --zone=work --add-interface=dummy0
With this you also tell firewalld to put dummy0 interface into work zone. This can be useful if NM does not know about the dummy0 interface but you still want to put that interface in some zone.
Beware that if NM knows dummy0 it tells firewalld to put that interface into zone NM wants to, so NM has always the last word (which is correct).
Example: # firewall-cmd --permanent --zone=work --add-interface=dummy0 sets dummy0 -> work on firewalld side, while
# echo "ZONE=home" >> /etc/sysconfig/network-scripts/ifcfg-dummy0 sets dummy0 -> home on NM side. Whenever then NM sets the dummy0 interface up it tells firewalld to put dummy0 into home and firewalld changes a zone dummy0 belongs to from work to home.
-- Jiri