On 03/22/2014 02:31 PM, Michael C Cambria wrote:
But I have several addresses.
Then don't use the invert option and specify the address you want with
the "reject" at the end. But as I already mentioned, this doesn't make
sense if you allow the "default target" to be REJECT or DROP.
I must have changed this default somehow. I had to learn about, then
create a list of rich rules with accept for sshd because all ssh
connections were being dropped (or rejected).
You can restore the defaults by copying the zone definition files from:
/usr/lib/firewalld/zones/* (the stock ones)
to /etc/firewalld/zones
--
Jorge