fix: enable forward by default for Fedora zones
Upstream enabled forward [1] by default for stock zones in v1.0.0. FedoraServer and FedoraWorkstation should follow upstream. This fixes some out of the box issues for users. e.g. wireguard doesn't work until user does `firewall-cmd --add-forward` With this enabled wireguard and other VPNs will work out of the box. [1]: https://firewalld.org/2020/04/intra-zone-forwarding
This commit is contained in:
parent
7b910e1756
commit
c2e602b9fa
@ -5,4 +5,5 @@
|
|||||||
<service name="ssh"/>
|
<service name="ssh"/>
|
||||||
<service name="dhcpv6-client"/>
|
<service name="dhcpv6-client"/>
|
||||||
<service name="cockpit"/>
|
<service name="cockpit"/>
|
||||||
|
<forward/>
|
||||||
</zone>
|
</zone>
|
||||||
|
@ -7,4 +7,5 @@
|
|||||||
<service name="samba-client"/>
|
<service name="samba-client"/>
|
||||||
<port protocol="udp" port="1025-65535"/>
|
<port protocol="udp" port="1025-65535"/>
|
||||||
<port protocol="tcp" port="1025-65535"/>
|
<port protocol="tcp" port="1025-65535"/>
|
||||||
|
<forward/>
|
||||||
</zone>
|
</zone>
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
|
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
|
||||||
Name: firewalld
|
Name: firewalld
|
||||||
Version: 1.2.0
|
Version: 1.2.0
|
||||||
Release: 0%{?dist}
|
Release: 2%{?dist}
|
||||||
URL: http://www.firewalld.org
|
URL: http://www.firewalld.org
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
Source0: https://github.com/firewalld/firewalld/releases/download/v%{version}/firewalld-%{version}.tar.gz
|
Source0: https://github.com/firewalld/firewalld/releases/download/v%{version}/firewalld-%{version}.tar.gz
|
||||||
@ -304,6 +304,9 @@ fi
|
|||||||
%{_mandir}/man1/firewall-config*.1*
|
%{_mandir}/man1/firewall-config*.1*
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Wed Jul 06 2022 Eric Garver <eric@garver.life> - 1.2.0-2
|
||||||
|
- enable forward for Fedora zones
|
||||||
|
|
||||||
* Wed Jul 06 2022 Eric Garver <eric@garver.life> - 1.2.0-1
|
* Wed Jul 06 2022 Eric Garver <eric@garver.life> - 1.2.0-1
|
||||||
- rebase package to v1.2.0
|
- rebase package to v1.2.0
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user