> I have been looking at firewalld in Fedora 17 in order to understand how > to convert an iptables command that I use in a script into a firewalld > one. The iptables command that I'm using is: > iptables -I INPUT -p udp -i $INTERFACE --dport 67 -j ACCEPT > > With firewalld-cmd I can do: > firewall-cmd --add --port=67/udp > > But there doesn't seem to be a way for me to specify an interface as > well? As in, I only want to open UDP port 67 on a specific network > interface, not all interfaces. > Are you setting up interfaces by hand or are you using NetworkManager or the network service?

Create a customized zone and use firewall-cmd to add th einterface to the zone: firewall-cmd --zone=<zone> --add --interface=<interface>