A firewall service daemon with D-BUS interface managing a dynamic firewall
firewalld provides a dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces. It has support for IPv4, IPv6 firewall settings and for ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an interface for services or applications to add firewall rules directly.
- Developed at security:netfilter
- Sources inherited from project openSUSE:Factory
-
4
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Leap:15.2:FactoryCandidates/firewalld && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
|
0001-firewall-backend-Switch-default-backend-to-ip |
0000002152 2.1 KB | |
| _service | 0000000655 655 Bytes | |
| _servicedata | 0000000236 236 Bytes | |
| firewalld-0.7.2.obscpio | 0007193613 6.86 MB | |
| firewalld.changes | 0000038998 38.1 KB | |
| firewalld.obsinfo | 0000000099 99 Bytes | |
| firewalld.spec | 0000010478 10.2 KB |
Revision 43 (latest revision is 88)
Dominique Leuenberger (dimstar_suse)
accepted
request 750645
from
Michał Rostecki (mrostecki)
(revision 43)
- Replace incorrect usage of %_libexecdir with %_prefix/lib
- rebased the original patch from revision 19
- apply patch only on openSUSE < TW, and SLES.
- Added a patch to make iptables the default again on openSUSE
- Update to version 0.7.2:
This is a bug fix only release.
* fix: direct: removeRules() was mistakenly removing all rules
* fix: guarantee zone source dispatch is sorted by zone name
* fix: nftables: fix zone dispatch using ipset sources in nat chains
* doc: add --default-config and --system-config
* fix: --add-masquerade should only affect ipv4
* fix: nftables: --forward-ports should only affect IPv4
* fix: direct: removeRules() not removing all rules in chain
* dbus: service: fix service includes individual APIs
* fix: allow custom helpers using standard helper modules
* fix: service: usage of helpers with '-' in name
* fix: Revert "ebtables: drop support for broute table"
* fix: ebtables: don't use tables that aren't available
* fix: fw: initialize _rfc3964_ipv4
- Update to version 0.7.1:
* Rich Rule Priorities
* Service Definition Includes - Service definitions can now
include lines like: <include service="https"/> which will
include all the ports, etc from the https service.
* RFC3964 IPv4 filtering - A new option RFC3964_IPv4 in
firewalld.conf is available. It does filtering based on RFC3964
Comments 0