Thank you for the answer.
I did some tests.
Bravo! Zone changes via /etc/sysconfig/network-scripts/ifcfg-<iface> (ZONE=xxx) are taken into account in a few seconds: iptables rules are appropriate.
Zone changes via "firewall-cmd --zone=xxx --change --interface=yyy"are taken into account immediately and disappear after a reboot, as you pointed.
If the zoning is done via the command "firewall-cmd --set-default-zone=xxx" (no zone declaredin /etc/sysconfig/network-scripts/ifcfg-<iface>) a restart is required. Is this the desired behavior?
Philippe.
Le 22/05/2012 08:00, Jiri Popelka a écrit :
Hi,
yes, each interface needs to be part of any zone. The zone is actually a property of the particular network connection so it should be possible to change this with the same tool where the other network connection properties are changed, i.e. the GUI to NetworkManager. But this part is still not done.
On Fedora, NetworkManager stores these settings in /etc/sysconfig/network-scripts/ifcfg-<iface> files, which is at the moment the only place where you can *permanently* change the zone of an interface. Just put for example 'ZONE=home' there. If there's no ZONE key, then default zone is used.
It's also possible to change the zone with firewall-cmd --zone=home --change --interface=em1 but that's only runtime change, so it doesn't survive restart.
Jiri
----- Original Message ----- From: "Philippe Marcovici"philippepma@free.fr To: firewalld-users@lists.fedorahosted.org Sent: Monday, May 21, 2012 6:24:14 PM Subject: How will the area change of an interface?
Hello.
I presume that a zone will be assigned to each interface. Is-it exact ?
How the change of zone will be done? Firewall-config UI ? I have not seen this possibility with the firewall-cmd command. Is-it normal ?
Thanks.
firewalld-users mailing list firewalld-users@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/firewalld-users _______________________________________________ firewalld-users mailing list firewalld-users@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/firewalld-users