<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.8.5">
</HEAD>
<BODY>
<BR>
<BR>
Am Samstag, den 19.11.2016, 08:55 -0500 schrieb James Valleroy:
<BLOCKQUOTE TYPE=CITE>
<PRE>
On 11/19/2016 06:24 AM, permondes - sagen wrote:
<FONT COLOR="#737373">> firewalld has a conffile prompt and I am not sure which version I should</FONT>
<FONT COLOR="#737373">> use. The changes are:</FONT>
<FONT COLOR="#737373">> </FONT>
<FONT COLOR="#737373">>> -DefaultZone=external</FONT>
<FONT COLOR="#737373">>> +DefaultZone=public</FONT>
<FONT COLOR="#737373">>> IPv6_rpfilter=yes</FONT>
<FONT COLOR="#737373">>> +IndividualCalls=no</FONT>
<FONT COLOR="#737373">>> +LogDenied=off</FONT>
<FONT COLOR="#737373">> </FONT>
<FONT COLOR="#737373">> Is it save to take the new settings or will e.g. DefaultZone impact</FONT>
<FONT COLOR="#737373">> FreedomBox?</FONT>
FreedomBox does expect the DefaultZone to be external. I think the
safest option is to:
1) Choose 'y' to take the maintainer's version of this file.
2) Run "sudo firewall-cmd --set-default-zone=external" to change the
DefaultZone back to external.
Of course this is not a good user experience, and will prevent automatic
upgrades of firewalld whenever the package modifies this file.
The root cause is that /etc/firewalld/firewalld.conf is a conffile, and
firewalld modifies this file when we run the above command.
--
James
</PRE>
</BLOCKQUOTE>
Thanks James, I did that, looks okay.<BR>
We have to find a way to handle the special configurations in a different / user friendly way, I think.
<BLOCKQUOTE TYPE=CITE>
<PRE>
_______________________________________________
Freedombox-discuss mailing list
<A HREF="mailto:Freedombox-discuss@lists.alioth.debian.org">Freedombox-discuss@lists.alioth.debian.org</A>
<A HREF="http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss">http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/freedombox-discuss</A>
</PRE>
</BLOCKQUOTE>
</BODY>
</HTML>