firewalld rule for ovirt host?

This is a multi-part message in MIME format. ------------MIME-220968237-659321615-delim Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi=2C In the quickstart guide we have the iptables rules for a fedora 19 host=2C= but currently we run firewalld on the host =28Centos 7=29 I=27ve converted the rules to a service xml for the zone but I can=27t figure out the firewalld translation for =22-A FORWARD -m physdev ! --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited =22 Anyone know how to do this in firewalld=3F Met vriendelijke groet=2C With kind regards=2C Jorick Astrego Netbulae Virtualization Experts=20 ---------------- =09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK= 08198180 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW= NL821234584B01 ---------------- ------------MIME-220968237-659321615-delim Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable =3Chtml=3E =3Cbody=3E Hi, <br> <br> In the quickstart guide we have the iptables rules for a fedora 19 host,= 3;<br> but currently we run firewalld on the host (Centos 7) <br> <br> I've converted the rules to a service xml for the zone but I can't <br> figure out the firewalld translation for "-A FORWARD -m physdev ! = <br> --physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited "= 3;<br> <br> Anyone know how to do this in firewalld? <br> <br> <br> = =3CBR /=3E =3CBR /=3E =3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cspan style=3D=22c= olor=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan style=3D=22= mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelijke groet= =2C With kind regards=2C=3Cbr=3E=3Cbr=3E=3C/span=3EJorick Astrego=3C/font= =3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=3Cbr=3ENetbul= ae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3B= border-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 522px=22= =3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px= =22=3ETel=3A 053 20 30 270=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bf= ont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E =3Ctd style=3D=22wid= th=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E =3Ctd sty= le=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=3E=3C/tr= =3E=3Ctr=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EFax= =3A 053 20 30 271=3C/td=3E =3Ctd style=3D=22width=3A 130px=3Bfont-size= =3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E =3Ctd style=3D=22width=3A 130= px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E =3Ctd style=3D=22w= idth=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=3C/tr=3E= =3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bborder-top= =3A1px solid =23ccc=3B=22=3E=3CBR /=3E =3C/body=3E =3C/html=3E ------------MIME-220968237-659321615-delim--

On Jan 21, 2015, at 9:45 AM, Jorick Astrego <j.astrego@netbulae.eu> wrote:
Hi,
In the quickstart guide we have the iptables rules for a fedora 19 host,
but currently we run firewalld on the host (Centos 7)
I've converted the rules to a service xml for the zone but I can't
figure out the firewalld translation for "-A FORWARD -m physdev !
--physdev-is-bridged -j REJECT --reject-with icmp-host-prohibited "
Anyone know how to do this in firewalld?
DISCLAIMER: I am just a lowly user of ovirt/RHEL/Fedora You can do almost anything you can do with iptables by using the passthrough option, although you have to make sure the rules fit the underlying iptables policy firewalld generates (by inspecting it afterwords). The following should work: firewall-cmd --permanent --direct --passthrough ipv4 -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT -- Jason T. Greene WildFly Lead / JBoss EAP Platform Architect JBoss, a division of Red Hat
participants (2)
-
Jason Greene
-
Jorick Astrego