Firewalld D-BUS documentation
Jiri Popelka
jpopelka at redhat.com
Fri Aug 16 12:38:57 UTC 2013
On 08/16/2013 01:36 PM, Victor Rafael Escobar Olmos wrote:
> ... so this lack of interface to assign the zone for NetworkManager
> was a bit contrasting with the rest of the parameters to configure the
> firewall.
Actually there is a way to achieve something similar:
firewall-cmd --permanent --zone=work --add-interface=dummy0
With this you also tell firewalld to put dummy0 interface into work
zone. This can be useful if NM does not know about the dummy0 interface
but you still want to put that interface in some zone.
Beware that if NM knows dummy0 it tells firewalld to put that interface
into zone NM wants to, so NM has always the last word (which is correct).
Example:
# firewall-cmd --permanent --zone=work --add-interface=dummy0
sets dummy0 -> work on firewalld side, while
# echo "ZONE=home" >> /etc/sysconfig/network-scripts/ifcfg-dummy0
sets dummy0 -> home on NM side. Whenever then NM sets the dummy0
interface up it tells firewalld to put dummy0 into home and firewalld
changes a zone dummy0 belongs to from work to home.
--
Jiri
More information about the firewalld-users
mailing list