Fedora-21 firewall advice?

[Dan Irwin]

Personally, I'm somewhat amused.

So the iptables scripts were broken. We all know that.

Instead of fixing them, let's make a whole new firewalld thing!


On Mon, Jan 19, 2015 at 7:56 AM, Ed Greshko <ed.greshko at greshko.com> wrote:

> On 01/19/15 05:32, Gordon Messmer wrote:
> > On 01/18/2015 04:44 AM, Heinz Diehl wrote:
> >> Opposed to what is written in this article, firewalld leaves the
> >> system open even after upgrading with "--product=nonproduct", which I
> >> verified some minutes ago on a laptop upgraded from F20 to F21
> >> yesterday evening.
> >
> > Use 'iptables -L -n -v'.  You are probably mistaking the allow-all-on-lo
> rule for an entirely open rule.  Firewalld's default is not "open"
>
> Yes.  It is certainly *NOT OPEN* as has been suggested....
>
> Trying to connect to sendmail on a newly minted F21 system from a F20
> system....
>
> [egreshko at meimei ~]$ telnet 192.168.1.222 25
> Trying 192.168.1.222...
> telnet: connect to address 192.168.1.222: No route to host
>
> Then opening up the port...
>
> [egreshko at meimei ~]$ telnet 192.168.1.222 25
> Trying 192.168.1.222...
> telnet: connect to address 192.168.1.222: Connection refused
>
> Since sendmail isn't listening on the port.
>
> --
> If you can't laugh at yourself, others will gladly oblige.
> --
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20150121/b8ef0049/attachment.html>