Matthew Miller (mattdm@xxxxxxxxxxxxxxxxx) said: > On Tue, Nov 13, 2012 at 06:37:37PM +0100, Thomas Woerner wrote: > > >That's not correct. You can modify the firewall just fine without > > >restarting it. > > This is related to system-config-firewall/lokkit. You are right, if > > you are using iptables directly then you do not have this > > limitation. firewalld is a replacement for s-c-fw/lokkit. > > This is not what it says in the feature page at > https://fedoraproject.org/wiki/Features/firewalld-default#Detailed_Description > > That says: > > The services iptables, iptables-ipv6 and ebtables will be replaced by > firewalld. system-config-firewall in it's [sic] current form will also be > replaced. Replaced in the default configuration - you obviously shouldn't be running firewalld and the static firewall scripts at the same time, so enabling them in combination would be a bad idea. Bill -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel