Project

General

Profile

action #25802

Switch to firewalld

Added by flacco over 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
-
Target version:
Start date:
2017-10-05
Due date:
% Done:

100%

Estimated time:

Description

The upcoming openSUSE leap 15 replaces the traditional SuSEfirewall2 with the firewalld system. Therefor we have to migrate our fw-settings from SuSEfirewall2 to firewalld. SuSEfirewall2 is not completely replaced, but we decided to switch firewalld. The migration script susefirewall2-to-firewalld will help to migrate.


Related issues

Related to invisAD-setup - action #36079: Modify sine2 / invisAD-setup to be compatible with leap 15Closed2018-05-10

History

#1 Updated by flacco over 4 years ago

  • Subject changed from Evaluate firewald to Evaluate firewalld

#2 Updated by ingogoeppert over 4 years ago

  • Category changed from 364 to Developement

#4 Updated by ingogoeppert over 4 years ago

  • Project changed from invis-server to invisAD-setup
  • Category deleted (Developement)
  • Target version deleted (Next)

#5 Updated by flacco over 4 years ago

  • Target version set to 14.0

#6 Updated by flacco about 4 years ago

  • Status changed from New to In Progress
  • % Done changed from 0 to 10

A first short test converting our SuSEfirewall2 Setup to firewalld with susefirewall2-to-firewalld ended in a fully blocking firewalld setup. :-(

#7 Updated by flacco about 4 years ago

  • Related to action #36079: Modify sine2 / invisAD-setup to be compatible with leap 15 added

#8 Updated by flacco about 4 years ago

  • % Done changed from 10 to 60

#9 Updated by flacco about 4 years ago

  • Subject changed from Evaluate firewalld to Evaluate firewalld -> switch to firewalld

#10 Updated by ingogoeppert about 4 years ago

  • Subject changed from Evaluate firewalld -> switch to firewalld to Switch to firewalld
  • Description updated (diff)

#11 Updated by ingogoeppert about 4 years ago

  • Assignee set to ingogoeppert

Current state:

  • Installed SuSEfirewall2 and firewalld and started the migration. Result was a partial working configuration. The script used instead of http a strange other service...
  • Created missing service files
  • Created new zone files for the default external and internal zones
  • Switched from partial masquerading of internal and VPN to complete masquerading of all internal interfaces
  • Modified the sine2 firewall script

To do:

  • Test the new sine2 firewall script with different configurations (ownCloud on default and different port)

#12 Updated by flacco almost 4 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 60 to 100

Job done

Also available in: Atom PDF