On Sat, Sep 08, 2018 at 10:13:34AM -1000, Boyd H. Ako wrote:
It's exactly like other zones.
I think I misunderstood your original goal. I think you want to add
"forward-ports" to a service definition. That's not supported. You'll
have to manually add the "forward-port" to the relevant zone.
Because I don't want to change that or have to recreate the the
rules they already have.
Sent from my iPhone
> On Sep 8, 2018, at 02:45, Eric Garver <egarver(a)redhat.com> wrote:
>
>> On Fri, Sep 07, 2018 at 02:01:31PM -1000, Boyd Ako wrote:
>> Nope that didn't do anything...
>>
>> How are the zone config files handled?
>>
>> I did put it in the right place right?
>
> You added a ZONE file, but were using --get-services. services != zones.
> After a firewalld reload try:
>
> # firewall-cmd --permanent --get-zones
>
> You'll have to add the interface or source address before traffic goes
> to the zone though.
>
> # firewall-cmd --permanent --zone=plunknet --add-interface=<your
interface>
> or
> # firewall-cmd --permanent --zone=plunknet --add-source=<your subnet>
>
>>
>>
>>
>> ------------------------------
>> Thank you for your time,
>>
>> Boyd H. Ako
>>
>> boyd.hanalei.ako(a)gmail.com
>>
https://www.boydhanaleiako.me
>> Cell Phone: (424) 244-9653PGP/GPG Public Key:
>>
https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
>> ------------------------------
>>
>>
>>> On Fri, Sep 7, 2018 at 4:48 AM Eric Garver <egarver(a)redhat.com>
wrote:
>>>
>>>> On Thu, Sep 06, 2018 at 02:59:25PM -1000, Boyd Ako wrote:
>>>> Domo... But, I don't see it showing up in the services after I
reload
>>>> FirewallD in `--get-services`.
>>>
>>> Maybe try "--permanent --get-services".
>>>
>>>>
>>>> /etc/firewalld/zones/splunknet.xml:
>>>> <?xml version="1.0" encoding="utf-8"?>
>>>> <zone version="1.0" target="ACCEPT">
>>>> <service name="netsplunk">
>>>> <short>Splunk SYSLOG Forward</short>
>>>> <forward-port port="514" protocol="udp"
to-port="1516"/>
>>>> </zone>
>>>>
>>>>
>>>>
>>>> ------------------------------
>>>> Thank you for your time,
>>>>
>>>> Boyd H. Ako
>>>>
>>>> boyd.hanalei.ako(a)gmail.com
>>>>
https://www.boydhanaleiako.me
>>>> Cell Phone: (424) 244-9653PGP/GPG Public Key:
>>>>
https://sks-keyservers.net/pks/lookup?op=get&search=0xC58073B21618F134
>>>> ------------------------------
>>>>
>>>>
>>>>> On Thu, Sep 6, 2018 at 4:07 AM Eric Garver
<egarver(a)redhat.com> wrote:
>>>>>
>>>>>> On Wed, Sep 05, 2018 at 03:56:01PM -1000, Boyd Ako wrote:
>>>>>> Anybody if there's a way to configure port forwarding like
you can do
>>>>>> services with the XML file?
>>>>>
>>>>> Yes! You can add almost anything to a zone XML file manually. See
man
>>>>> page for firewalld.zone.
>>>>> _______________________________________________
>>>>> firewalld-users mailing list --
firewalld-users(a)lists.fedorahosted.org
>>>>> To unsubscribe send an email to
>>>>> firewalld-users-leave(a)lists.fedorahosted.org
>>>>> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
>>>>> List Guidelines:
>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>>>> List Archives:
>>>>>
>>>
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedora...
>>>>>
>>>
>>>> _______________________________________________
>>>> firewalld-users mailing list -- firewalld-users(a)lists.fedorahosted.org
>>>> To unsubscribe send an email to
>>> firewalld-users-leave(a)lists.fedorahosted.org
>>>> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
>>>> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>>> List Archives:
>>>
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedora...
>>> _______________________________________________
>>> firewalld-users mailing list -- firewalld-users(a)lists.fedorahosted.org
>>> To unsubscribe send an email to
>>> firewalld-users-leave(a)lists.fedorahosted.org
>>> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
>>> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>> List Archives:
>>>
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedora...
>>>
>
>> _______________________________________________
>> firewalld-users mailing list -- firewalld-users(a)lists.fedorahosted.org
>> To unsubscribe send an email to firewalld-users-leave(a)lists.fedorahosted.org
>> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
>> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedora...
> _______________________________________________
> firewalld-users mailing list -- firewalld-users(a)lists.fedorahosted.org
> To unsubscribe send an email to firewalld-users-leave(a)lists.fedorahosted.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedora...
_______________________________________________
firewalld-users mailing list -- firewalld-users(a)lists.fedorahosted.org
To unsubscribe send an email to firewalld-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/firewalld-users@lists.fedora...