Firewalld and network namespaces (containers)

Anders Blomdell anders.blomdell at control.lth.se
Mon Apr 28 19:01:11 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, I'm fiddling with network namespaces and need to set up
masquerading for virtual ethernets (veth1 in container, veth0
in main namespace). While firewalld is running this can be done with
(which works nicely on systems without firewalld as well):

  iptables -t filter -I FORWARD -i veth0 -j ACCEPT
  iptables -t nat -I POSTROUTING -j MASQUERADE

but those changes are lost when firewalld is reloaded. Is there any 
documentation on how to get the DBUS-messages when firewalld is reloaded
(preferably python :-)) or is there a better way?

Regards

Anders Blomdell

- -- 
Anders Blomdell                  Email: anders.blomdell at control.lth.se
Department of Automatic Control
Lund University                  Phone:    +46 46 222 4625
P.O. Box 118                     Fax:      +46 46 138118
SE-221 00 Lund, Sweden

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTXqV3AAoJENZYyvaDG8NcjMsH/3C+wR4WwkFyaKkkjKN2YGvB
IXMIOqqrloPCcqpSzaLiA3GX5RDkIrbQDrWph73gHiU4+cVt1/zpp2ES0CL/JrQL
Iw0BiU5FhyHCl86O9h3RlR5nkoNgzrVeLzQTtKQbdIraDmHD0ieDeKiqrWuq0eKn
lnpmaN//cFfs8aNWgLiv9qxokvERauqkrcLn37nDKDpLhy+K82psmRZ0WJXGc9nV
pW3zASAP/dwYuhu0/hlzI9uuwwxIIWJfxWK7Y9KWQWlvyvf0EWzqjEEiYqRyy4Gx
dYTwroSOG25r2VYw4qxRZkZyagK67dWMojyVF3SIx8/zuiArx6YWQEysIeR0zrw=
=hayR
-----END PGP SIGNATURE-----


More information about the firewalld-devel mailing list