G'day Eric,
Thank you for the feedback and the example. It is much appreciated.
This worked in my lab setup:
[root@firewall ~]# firewall-cmd --permanent --zone=FedoraServer --remove-interface=ens192 [root@firewall ~]# firewall-cmd --permanent --zone=FedoraServer --remove-interface=ens224 [root@firewall ~]# firewall-cmd --permanent --zone=dmz --add-interface=ens224 [root@firewall ~]# firewall-cmd --permanent --zone=internal --add-interface=ens192 [root@firewall ~]# firewall-cmd --permanent --new-policy InternalToDmz [root@firewall ~]# firewall-cmd --permanent --policy InternalToDmz --add-ingress-zone internal [root@firewall ~]# firewall-cmd --permanent --policy InternalToDmz --add-egress-zone dmz [root@firewall ~]# firewall-cmd --permanent --policy InternalToDmz --add-service ssh [root@firewall ~]# firewall-cmd --reload
So what is the "destination address=" parameter in the rich-rule for?
Also, would you have any ideas when firewalld v0.9.x will make it into the CentOS build?
Rob