Hello Scott, On 03/30/2012 02:40 AM, Scott Talbert wrote: Are you setting up interfaces by hand or are you using NetworkManager or the network service? If you are using NetworkManager or the network service: You can use a separate zone for the interface you want to enable the bootps port. Just add "ZONE=<zone>" to the ifcfg- file for this interface, then it will automatically be used. For example use the work zone and enable the bootps port for this zone. Either temoprary with firewall-cmd or by editing the zone file. The default zone is 'public'. As root user: 1) Copy the work zone from the default zones to the customized zone directory: cp /usr/lib/firewalld/zones/work.xml /etc/firewalld/zones/ 2) Add the port line to the zone (between <zone..> and </zone>): <port port="67" protocol="udp"/> 3) firewall-cmd --reload You can verify if the port is open now: iptables -S | grep 67 To get the default zone (default: 'public'): firewall-cmd --get-default-zone To get the active zones: firewall-cmd --get-active-zones If you are setting up interfaces by hand: Create a customized zone and use firewall-cmd to add th einterface to the zone: firewall-cmd --zone=<zone> --add --interface=<interface> Thanks, Thomas