After config cleanup, masquerade is auto-enabled on external zone

Marcos Felipe Rasia de Mello marcosfrm at gmail.com
Fri Jun 5 15:39:28 UTC 2015


When I do this:

systemctl stop firewalld.service
rm -f /etc/firewalld/zones/*
rm -f /etc/firewalld/direct.xml*
systemctl start firewalld.service

firewalld enables by default masquerade on my external network:

grep ZONE /etc/sysconfig/network-scripts/ifcfg-*
/etc/sysconfig/network-scripts/ifcfg-Conexão_cabeada_1:ZONE=external
/etc/sysconfig/network-scripts/ifcfg-Conexão_cabeada_2:ZONE=trusted

firewall-cmd --zone=external --query-masquerade
yes

Unexpected I think. Is there other way to reset all firewalld settings?

firewalld-0.3.13-2.fc21.noarch here.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/firewalld-users/attachments/20150605/50229075/attachment.html>


More information about the firewalld-users mailing list