RE: firewalld zones with tun interfaces

2016-12-27 Thread Joseph L. Casale
> If the tun interface is always the same, just use firewall-cmd > --zone=my_zone --add-interface=tun0 Hi Stuart, Yea I can control the interface name but I can also pass it into the up script. So this seemed to work well where as I also tried firewall-cmd --permanent --change-zone=tun0 --zone=my

Re: firewalld zones with tun interfaces

2016-12-27 Thread Stuart Gathman
On 12/27/2016 03:17 PM, Joseph L. Casale wrote: > I have a system controlled openvpn configuration that creates a tun interface. > As the resulting tun interface falls under network manager, I created an up > script > That executes `/usr/bin/nmcli connection modify tun0 connection.zone my_zone` >

firewalld zones with tun interfaces

2016-12-27 Thread Joseph L. Casale
I have a system controlled openvpn configuration that creates a tun interface. As the resulting tun interface falls under network manager, I created an up script That executes `/usr/bin/nmcli connection modify tun0 connection.zone my_zone` where the actual interface name is passed in. This seemin