You know nm-connection-editor is a GUI program, do you know if it's possible to make the same changes from the command line? (across the nmcli or another solution?).
I mean, firewalld looks to be an excellent solution which handles with many variables and situations, and I am actually surprised by the versatility to modify and manage its own configuration files from the command line interface; so this lack of interface to assign the zone for NetworkManager was a bit contrasting with the rest of the parameters to configure the firewall.
Thank you Mr. Popelka!
Cordialmente / Mit freundlichen Grüßen / Kind regards
Víctor R. Escobar
IBM Systems &Technology Group
Phone: +49-7031-16-2378 IBM Deutschland (Embedded image moved to file: pic48053.gif)
E-Mail: vescobar@de.ibm.com Schoenaicher Str. 220
71032 Boeblingen
Germany
IBM Deutschland Research & Development GmbH / Vorsitzender des Aufsichtsrats: Martin Jetter Geschäftsführung: Erich Baier Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart, HRB 243294
From: Jiri Popelka jpopelka@redhat.com To: Firewalld users discussion list firewalld-users@lists.fedorahosted.org, Cc: Victor Rafael Escobar Olmos/Germany/IBM@IBMDE, Thomas Woerner twoerner@redhat.com Date: 16/08/2013 13:20 Subject: Re: Firewalld D-BUS documentation
On 08/16/2013 01:00 PM, Victor Rafael Escobar Olmos wrote:
BTW, you could improve your documentation adding the next lines to the manpage:
To add an interface to a zone and make the changes permanent, we must write the next configuration file: echo "ZONE=<zone>" >> /etc/sysconfig/network-scripts/ifcfg- <interface>
Actually firewalld.zones(5) already says:
How to set or change a zone for a connection?
The zone is stored into the ifcfg of the connection with ZONE=option. If the option is missing or empty, the default zone set in firewalld is used. If the connection is controlled by NetworkManager, you can also use nm-connection-editor to change the zone.
-- Jiri
