Re: firewalld / iptables.service past F17

2012-05-02 Thread Jiri Popelka
I've updated the feature page. -- Jiri On 04/30/2012 10:24 PM, Kévin Raymond wrote: Does that imply that new installs will be easily switched from firewalld to static iptables? I always do new install but I want to keep my firewall static, with my current iptables script. Once we actually

Re: firewalld / iptables.service past F17

2012-05-02 Thread Adam Williamson
On Thu, 2012-04-26 at 11:22 +0200, Reindl Harald wrote: Am 26.04.2012 11:18, schrieb Adam Williamson: Does that imply that new installs will be easily switched from firewalld to static iptables? I always do new install but I want to keep my firewall static, with my current iptables

Re: firewalld / iptables.service past F17

2012-04-30 Thread Kévin Raymond
Does that imply that new installs will be easily switched from firewalld to static iptables? I always do new install but I want to keep my firewall static, with my current iptables script. Once we actually go to firewalld by default, then yes, at least as long as lokkit and s-c-f are

Re: firewalld / iptables.service past F17

2012-04-26 Thread Chris Murphy
Is anyone else seeing on F17 TC1 startup a systemd message that iptables failed? -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: firewalld / iptables.service past F17

2012-04-26 Thread Adam Williamson
On Wed, 2012-04-25 at 17:27 -0600, Dariusz J. Garbowski wrote: On 25/04/12 10:55 AM, Adam Williamson wrote: On Tue, 2012-04-24 at 09:30 -0500, Jon Ciesla wrote: Nothing is being taken away, the default is being changed. If you're using Fedora in production, I presume you're installing

Re: firewalld / iptables.service past F17

2012-04-26 Thread Reindl Harald
Am 26.04.2012 11:18, schrieb Adam Williamson: Does that imply that new installs will be easily switched from firewalld to static iptables? I always do new install but I want to keep my firewall static, with my current iptables script. Once we actually go to firewalld by default, then yes,

Re: firewalld / iptables.service past F17

2012-04-26 Thread Dariusz J. Garbowski
On 26/04/12 03:18 AM, Adam Williamson wrote: On Wed, 2012-04-25 at 17:27 -0600, Dariusz J. Garbowski wrote: Does that imply that new installs will be easily switched from firewalld to static iptables? I always do new install but I want to keep my firewall static, with my current iptables

Re: firewalld / iptables.service past F17

2012-04-25 Thread Adam Williamson
On Tue, 2012-04-24 at 09:30 -0500, Jon Ciesla wrote: Nothing is being taken away, the default is being changed. If you're using Fedora in production, I presume you're installing with Kickstart. It's worth noting that if the question is how does firewalld handle upgrades, I think it may be

Re: firewalld / iptables.service past F17

2012-04-25 Thread Dariusz J. Garbowski
On 25/04/12 10:55 AM, Adam Williamson wrote: On Tue, 2012-04-24 at 09:30 -0500, Jon Ciesla wrote: Nothing is being taken away, the default is being changed. If you're using Fedora in production, I presume you're installing with Kickstart. It's worth noting that if the question is how does

Re: firewalld / iptables.service past F17

2012-04-24 Thread Reindl Harald
Am 24.04.2012 02:08, schrieb Oron Peled: Looks like this transition (as is currently planned) is going to break many setups. I want to show the three following use-cases which may be severely broken by this transition. exactly this is the problem i have attached my ip-tables script making at

Re: firewalld / iptables.service past F17

2012-04-24 Thread Jon Ciesla
On Mon, Apr 23, 2012 at 7:32 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 24.04.2012 02:08, schrieb Oron Peled: Looks like this transition (as is currently planned) is going to break many setups. I want to show the three following use-cases which may be severely broken by this

Re: firewalld / iptables.service past F17

2012-04-24 Thread Reindl Harald
Am 24.04.2012 16:30, schrieb Jon Ciesla: Nothing is being taken away, the default is being changed. If you're using Fedora in production, I presume you're installing with Kickstart. You can set up anything you like in Kickstart, including not using firewalld if you so desire. thank you for

Re: firewalld / iptables.service past F17

2012-04-24 Thread Jon Ciesla
On Tue, Apr 24, 2012 at 9:38 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 24.04.2012 16:30, schrieb Jon Ciesla: Nothing is being taken away, the default is being changed.  If you're using Fedora in production, I presume you're installing with Kickstart.  You can set up anything you like

Re: firewalld / iptables.service past F17

2012-04-23 Thread Miloslav Trmač
On Tue, Apr 17, 2012 at 10:40 PM, Reindl Harald h.rei...@thelounge.net wrote: Hi one question before decisions are nailed down http://fedoraproject.org/wiki/Features/firewalld-default An explicit transition is planned after Fedora 18 with dropping support for the static firewall with

Re: firewalld / iptables.service past F17

2012-04-23 Thread Reindl Harald
Am 23.04.2012 17:32, schrieb Miloslav Trmač: On Tue, Apr 17, 2012 at 10:40 PM, Reindl Harald h.rei...@thelounge.net wrote: http://fedoraproject.org/wiki/Features/firewalld-default An explicit transition is planned after Fedora 18 with dropping support for the static firewall with

Re: firewalld / iptables.service past F17

2012-04-23 Thread Oron Peled
On Monday, 23 בApril 2012 18:56:23 Reindl Harald wrote: Am 23.04.2012 17:32, schrieb Miloslav Trmač: On Tue, Apr 17, 2012 at 10:40 PM, Reindl Harald h.rei...@thelounge.net wrote: http://fedoraproject.org/wiki/Features/firewalld-default An explicit transition is planned after Fedora 18

firewalld / iptables.service past F17

2012-04-17 Thread Reindl Harald
Hi one question before decisions are nailed down http://fedoraproject.org/wiki/Features/firewalld-default An explicit transition is planned after Fedora 18 with dropping support for the static firewall with system-config-firewal/lokkit. A migration from the static firewall model will be