[CentOS] firewalld being stupid

Tue Nov 17 16:46:36 UTC 2015
Nick Bright <nick.bright at valnet.net>

On 11/17/2015 8:18 AM, James B. Byrne wrote:
> This behaviour is congruent with SELinux. One utility adjusts the 
> permanent configuration, the one that will be applied at startup. 
> Another changes the current running environment without altering the 
> startup config. From a sysadmin point of view this is desirable since 
> changes to a running system are often performed for empirical testing. 
> Leaving ephemeral state changes permanently fixed in the startup 
> config could, and almost certainly would eventually, lead to serious 
> problem during a reboot. Likewise, immediately introducing a state 
> change to a running system when reconfiguring system startup options 
> is just begging for an operations incident report. It may not be 
> intuitive to some but it is certainly the logical way of handling this. 

I certainly don't disagree with this behavior.

What I disagree with is documented commands _*not working and failing 
silently*_.

-- 
-----------------------------------------------
-  Nick Bright                                -
-  Vice President of Technology               -
-  Valnet -=- We Connect You -=-              -
-  Tel 888-332-1616 x 315 / Fax 620-331-0789  -
-  Web http://www.valnet.net/                 -
-----------------------------------------------
- Are your files safe?                        -
- Valnet Vault - Secure Cloud Backup          -
- More information & 30 day free trial at     -
- http://www.valnet.net/services/valnet-vault -
-----------------------------------------------

This email message and any attachments are intended solely for the use of the addressees hereof. This message and any attachments may contain information that is confidential, privileged and exempt from disclosure under applicable law. If you are not the intended recipient of this message, you are prohibited from reading, disclosing, reproducing, distributing, disseminating or otherwise using this transmission. If you have received this message in error, please promptly notify the sender by reply E-mail and immediately delete this message from your system.