On 01/23/2013 11:57 PM, Philippe Marcovici wrote:
Hello.
Ok, i use a french tuto to explain it (i am working on it).
With firewall-config :
- I change for "permanent configuration" :
http://doc.fedora-fr.org/wiki/Parefeu_-_firewall_-_FirewallD#Vue_en_cours_-_...
- I select "public zone"
- And there,
http://doc.fedora-fr.org/wiki/Parefeu_-_firewall_-_FirewallD#Ic.C3.B4nes_zon...,
- i click on the second icon (modify a zone),
- i uncheck "target" (default target),
- i change "ACCEPT" by "DROP".
- i check "target" (default target) (or not, it's the same),
- i click on "validation".
- I do "File>Quit".
Nothing is changed (iptables -v -n -L).
Permanent changes become active after reload/restart, but yes, there seems to be a bug, I can see the following lines in log:
DEBUG1: Loading zone file '/etc/firewalld/zones/public.xml' DEBUG1: Overloads zone 'public' ('/usr/lib/firewalld/zones/public.xml') ... DEBUG2: firewall.core.ipXtables.ip4tables: /sbin/iptables -A DROP_allow -t filter -m udp -p udp --dport 5353 -d 224.0.0.251 -m conntrack --ctstate NEW -j ACCEPT ERROR: '/sbin/iptables -A DROP_allow -t filter -m udp -p udp --dport 5353 -d 224.0.0.251 -m conntrack --ctstate NEW -j ACCEPT' failed: iptables: No chain/target/match by that name.
-- Jiri