From Fedora Project Wiki

Revision as of 12:27, 27 September 2012 by Jpopelka (talk | contribs) (Created page with "= Description = firewall-config knows everything that we've already tested in previous test cases. == Changing default zone == The ''Change Default Zone'' button does the sam...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Description

firewall-config knows everything that we've already tested in previous test cases.

Changing default zone

The Change Default Zone button does the same as firewall-cmd --set-default-zone=zone, see: Test case 2

Runtime and Persistent configuration

On the left side there's a zone list. Clicking on the zone name it's configuration is read and you can change it. The combo box next to "Current view" switches between persistent and runtime configuration.

Runtime configuration

If you change runtime configuration the changes are imediately aplied to the active configuration without a need to restart or confirm anything.

How to test

Set view to runtime, click on zone home, try adding/changing various services, ports etc. and check whether the runtime configuration changes correctly with:

 firewall-cmd --zone=home --list-all
 iptables-save | grep home

Do service firewalld restart and make sure the runtime changes are gone.

Persistent configuration

In a persistent view you can do the same but the changes are done in configuration files (/etc/firewalld/) and you have to press the Reload Firewalld button for the persistent configuration to become active. In the persistent view you can also add and edit zones, services and ICMP types.

How to test

Set view to persistent, click on zone internal, try adding/changing various services, ports etc. and check whether the configuration in /etc/firewalld/zones/internal.xml gets changed. Do service firewalld restart and make sure the changes you had done survived the restart and are now active:

 firewall-cmd --zone=internal --list-all
 iptables-save | grep internal