Firewalld D-BUS documentation

Jiri Popelka jpopelka at redhat.com
Fri Aug 16 12:38:57 UTC 2013


On 08/16/2013 01:36 PM, Victor Rafael Escobar Olmos wrote:
> ... so this lack of interface to assign the zone for NetworkManager
> was a bit contrasting with the rest of the parameters to configure the
> firewall.

Actually there is a way to achieve something similar:
firewall-cmd --permanent --zone=work --add-interface=dummy0

With this you also tell firewalld to put dummy0 interface into work 
zone. This can be useful if NM does not know about the dummy0 interface 
but you still want to put that interface in some zone.

Beware that if NM knows dummy0 it tells firewalld to put that interface 
into zone NM wants to, so NM has always the last word (which is correct).

Example:
# firewall-cmd --permanent --zone=work --add-interface=dummy0
sets dummy0 -> work on firewalld side, while

# echo "ZONE=home" >> /etc/sysconfig/network-scripts/ifcfg-dummy0
sets dummy0 -> home on NM side. Whenever then NM sets the dummy0 
interface up it tells firewalld to put dummy0 into home and firewalld 
changes a zone dummy0 belongs to from work to home.

--
Jiri


More information about the firewalld-users mailing list