INPUT_direct chain
by Jorge Fábregas
Hi,
What's the purpose of the *INPUT_direct* custom-chain in the
filter/INPUT chain? Is this the recommended chain to use when inserting
custom rules via the --direct option? Is it sort of like, to keep
things organized?
Thanks,
Jorge
9 years, 9 months
firewalld 0.3.10
by Jiri Popelka
Hi,
We've released 0.3.10.
https://fedorahosted.org/released/firewalld/firewalld-0.3.10.tar.bz2
sha1sum: b803019884cc1a230ed74a40b6592e7b51e139f7
Changelog:
- new services: freeipa-ldap, freeipa-ldaps, freeipa-replication,
puppermaster, amanda-k5, synergy,
xmpp-client, xmpp-server, xmpp-bosh, xmpp-local,
tor, privoxy, sane
- do not use at_console in D-Bus policies (RHBZ#1094745)
- apply all rich rules for non-default targets
- AppData file (RHBZ#1094754)
- separate Polkit actions for desktop & server (RHBZ#1091068)
- sanitize missing ip6t_rpfilter (RHBZ#1074427)
- firewall/core/io/*: few improvements (RHBZ#1065738)
- no load failed error for absent direct.xml file
- new DBUS_INTERFACE.getZoneSettings to get all run-time zone settings
- fixed creation and deletion of zones, services and icmptypes over
D-Bus signals
- FirewallClientZoneSettings: Set proper default target
- if Python2 then encode strings from sax parser (RHBZ#1059104,
RHBZ#1058853)
- firewall-cmd:
- don't colour output of query commands (RHBZ#1097841)
- use "default" instead of {chain}_{zone} (RHBZ#1075675)
- New --get-target and --set-target
- Create and remove permanent zones, services and icmptypes
- firewall-config:
- Adding services and icmptypes resulted in duplicates in UI
- Use left button menu of -applet in Option menu
- firewall-offline-cmd: same functionality as 'firewall-cmd --permanent'
- firewall-applet: ZoneConnectionEditor was missing the Default Zone entry
- bash-completion: getting zones/services/icmps is different
with/without --permanent
- firewalld.zone(5): removed superfluous slash (RHBZ#1091575)
- updated translations
--
Jiri
9 years, 10 months
openvpn
by michiel
Hi, I try to get firewalld playing nice with openvpn but failed. I opened
the opevpn udp port but I think the tun interface needs some love. The vpn
is working when I disable firewalld.
Any pointers?
thx,
Michiel
9 years, 11 months
