So, again, the interface has lost its zone after it was set via nmcli and added to the network-scripts/ifcfg-p1p1 file.ĭoes anyone see anything obvious I am doing wrong here? If not, this seems like a pretty significant bug that was introduced in a recent patch. Then, I restarted network services and checked again: # cat /etc/sysconfig/network-scripts/ifcfg-p1p1 Then, I tried the same test using nmcli as opposed to firewall-cmd: # nmcli connection modify p1p1 connection.zone my_internal_zone I reproduced the same results with a full reboot. # cat /etc/sysconfig/network-scripts/ifcfg-p1p1 Nope - I restarted networking and checked again: # systemctl restart network Looks good! I thought the problem was solved at this point. Then, I verified by checking the network-scripts/ifcfg-p1p1 file: # cat /etc/sysconfig/network-scripts/ifcfg-p1p1
The interface is under control of NetworkManager, setting zone to 'my_internal_zone'. Then, I added the p1p1 interface to the desired zone: # firewall-cmd -permanent -zone=my_internal_zone -add-interface=p1p1 The interface is under control of NetworkManager, setting zone to default. The interface is under control of NetworkManager and already bound to the default zone Here is the test case I just ran, which makes me think there is a bug, or perhaps that I am doing something obvious wrong and not seeing my error:įirst, I removed the p1p1 interface from the default drop zone: # firewall-cmd -permanent -zone=drop -remove-interface=p1p1 In other words, interface p1p1 lost it's zone (which was configured via nmcli and present in the network-scripts/ifcfg-p1p1 file) After the last patch cycle and reboot I have the following: # firewall-cmd -get-active-zones First, here is my expected config (before the patch cycle): # firewall-cmd -get-active-zones Here is the issue - replicated with test-cases. I have read a couple recent threads/bugs on related topics: This has worked fine for about 6 months, but after the latest patch cycle we have an issue. I have a firewalld config with two interfaces, each assigned to its own zone.
0 kommentar(er)
