Re: Iptables->Firewalld Upgrade: Really Necessary?
On 7/19/19 3:20 PM, Tim Evans wrote:
I'm planning on upgrading that system to Fedora 30, and am
wondering if
I really, really need to figure out how to port my iptables ruleset to
work with firewalld. Other than the need to be up to date (I am
originally from Kansas City), what're the advantages of firewalld?
It gives a nicer interface for editing the rules and allows for some
dynamic management.
Installing F30, adding iptables and my current ruleset, and disabling
firewalld looks very simple and quick. Why shouldn't I do it?
There's no reason not to. On my servers I disable firewalld and run a
script with my custom iptables rules (generated from fwbuilder). It
might be possible to do what I want with firewalld, but for now it works
and I don't have the time to figure out the alternative. Since I do
eventually want to do some dynamic rule management, I expect someday I
will get around to looking more at firewalld.