Re: How to cleanly stop and restart firewalld?

[Tahir Hafiz <tahir.hafiz@xxxxxxxxx>]

If you do a systemctl status -l firewalld

after starting up again that should you the errors it has from starting up (the log lines would be from journald itself).

But as suggested earlier the

--panic-on

--panic-off

flags seem really cool.

--state, flag will show you if firewalld is running or not.

On Tue, Jun 16, 2015 at 9:09 PM, Martin Cigorraga <martincigorraga@xxxxxxxxx> wrote:

Quite interesting to know Matthew, thanks.
Btw, F21 and F22 releases - alongside their new distribution scheme - have proven to be phenomenal so far, kudos!
-Martin

On Tue, Jun 16, 2015 at 1:36 PM Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> wrote:

On Tue, Jun 16, 2015 at 12:12:39AM -0700, David Highley wrote:
> Generally we are needing to run a test to see if we have a firewall
> issue so we want to stop for the test and then start the firewall up
> again.

Currently, firewalld has a "panic mode" which, as you might expect,
drops everything. It seems reasonable for it to also have a "open for
testing" mode which would temporarily let everything through. The
advantage over stopping and restarting is that any
dynamically-generated rules could persist (for example, you wouldn't
break networking in your VMs).

--
Matthew Miller
<mattdm@xxxxxxxxxxxxxxxxx>
Fedora Project Leader
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org