First version of libvirt firewalld patch

Thomas Woerner twoerner at redhat.com
Thu Mar 15 16:03:44 UTC 2012


Hello,

here is the first version of the firewalld patch for nwfilter. 
"firewall-cmd --direct --passthrough {ipv4|ipv6|eb} args" is used as a 
replacement for iptables, ip6tables and ebtables.

The rules are passed through to netfilter without processing and saving 
them. This means that the rules are gone if firewalld will be reloaded 
or restarted. Therefore I'd like to add automatic firewalld activation, 
deactivation and reactivation detection (using a dbus watch) in case of 
firewalld start, stop and restart/reload.

Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libvirt-0.9.10-firewalld.patch
Type: text/x-patch
Size: 2142 bytes
Desc: not available
URL: <https://fedorahosted.org/pipermail/firewalld-devel/attachments/20120315/ce5d8c4d/attachment.bin>


More information about the firewalld-devel mailing list