3:35 p.m.
Hi.
I try to change the value of the default target by DROP.
But change does not seem to have any effect.
And after stop / start of firewall-config default target is ACCEPT, again.
I tried with an existing zone and a new zone.
Thanks, Philippe.
9:12 a.m.
Hello,
On 01/17/2013 10:35 PM, Philippe Marcovici wrote:
Hi.
I try to change the value of the default target by DROP.
But change does not seem to have any effect.
And after stop / start of firewall-config default target is ACCEPT, again.
I tried with an existing zone and a new zone.
please explain what exactly you have done. Where have you changed the
default target?
Thanks, Philippe.
_______________________________________________
firewalld-users mailing list
firewalld-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
Thanks,
Thomas
4:57 p.m.
Hello.
Ok, i use a french tuto to explain it (i am working on it).
With firewall-config :
- I change for "permanent configuration" :
http://doc.fedora-fr.org/wiki/Parefeu_-_firewall_-_FirewallD#Vue_en_cours...
- I select "public zone"
- And there,
http://doc.fedora-fr.org/wiki/Parefeu_-_firewall_-_FirewallD#Ic.C3.B4nes_...,
- i click on the second icon (modify a zone),
- i uncheck "target" (default target),
- i change "ACCEPT" by "DROP".
- i check "target" (default target) (or not, it's the same),
- i click on "validation".
- I do "File>Quit".
Nothing is changed (iptables -v -n -L).
Philippe.
Le 23/01/2013 16:12, Thomas Woerner a écrit :
Hello,
On 01/17/2013 10:35 PM, Philippe Marcovici wrote:
> Hi.
>
> I try to change the value of the default target by DROP.
> But change does not seem to have any effect.
> And after stop / start of firewall-config default target is ACCEPT,
> again.
> I tried with an existing zone and a new zone.
>
please explain what exactly you have done. Where have you changed the
default target?
> Thanks, Philippe.
> _______________________________________________
> firewalld-users mailing list
> firewalld-users(a)lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
Thanks,
Thomas
_______________________________________________
firewalld-users mailing list
firewalld-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
3:43 a.m.
On 01/23/2013 11:57 PM, Philippe Marcovici wrote:
Hello.
Ok, i use a french tuto to explain it (i am working on it).
With firewall-config :
- I change for "permanent configuration" :
http://doc.fedora-fr.org/wiki/Parefeu_-_firewall_-_FirewallD#Vue_en_cours...
- I select "public zone"
- And there,
http://doc.fedora-fr.org/wiki/Parefeu_-_firewall_-_FirewallD#Ic.C3.B4nes_...,
- i click on the second icon (modify a zone),
- i uncheck "target" (default target),
- i change "ACCEPT" by "DROP".
- i check "target" (default target) (or not, it's the same),
- i click on "validation".
- I do "File>Quit".
Nothing is changed (iptables -v -n -L).
Permanent changes become active after reload/restart,
but yes, there seems to be a bug, I can see the following lines in log:
DEBUG1: Loading zone file '/etc/firewalld/zones/public.xml'
DEBUG1: Overloads zone 'public' ('/usr/lib/firewalld/zones/public.xml')
...
DEBUG2: firewall.core.ipXtables.ip4tables: /sbin/iptables -A DROP_allow
-t filter -m udp -p udp --dport 5353 -d 224.0.0.251 -m conntrack
--ctstate NEW -j ACCEPT
ERROR: '/sbin/iptables -A DROP_allow -t filter -m udp -p udp --dport
5353 -d 224.0.0.251 -m conntrack --ctstate NEW -j ACCEPT' failed:
iptables: No chain/target/match by that name.
--
Jiri
10:58 a.m.
On 01/24/2013 10:43 AM, Jiri Popelka wrote:
ERROR: '/sbin/iptables -A DROP_allow -t filter -m udp -p udp
--dport
5353 -d 224.0.0.251 -m conntrack --ctstate NEW -j ACCEPT' failed:
iptables: No chain/target/match by that name.
I've just fixed this upstream, thanks for the report.
http://git.fedorahosted.org/cgit/firewalld.git/commit/?id=be2be66d3d68ed1...
--
Jiri
2:54 a.m.
Thanks.
Philippe.
----- Mail original -----
De: "Jiri Popelka" <jpopelka(a)redhat.com>
À: "Firewalld users discussion list"
<firewalld-users(a)lists.fedorahosted.org>
Envoyé: Jeudi 24 Janvier 2013 17:58:33
Objet: Re: how to use the default target?
On 01/24/2013 10:43 AM, Jiri Popelka wrote:
ERROR: '/sbin/iptables -A DROP_allow -t filter -m udp -p udp
--dport
5353 -d 224.0.0.251 -m conntrack --ctstate NEW -j ACCEPT' failed:
iptables: No chain/target/match by that name.
I've just fixed this upstream, thanks for the report.
http://git.fedorahosted.org/cgit/firewalld.git/commit/?id=be2be66d3d68ed1...
--
Jiri
_______________________________________________
firewalld-users mailing list
firewalld-users(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/firewalld-users
4108
days inactive
4116
days old
firewalld-users@lists.fedorahosted.org
5 comments
3 participants
participants (3)
-
Jiri Popelka -
philippepma＠free.fr -
Thomas Woerner