[CentOS] Firewalld

[Paul Heinlein]

On Mon, 12 Oct 2015, Ian Mortimer wrote:

> On Sun, 2015-10-11 at 15:00 -0700, Emmett Culley wrote:
>
>> I assume there must be a different set of configuration files that 
>> are accessed upon reboot than those accessed upon firewalld 
>> restart.
>
> The saved rules are under /etc/firewalld/zones.  The rules for the 
> default zone should be the ones loaded.  The default zone is defined 
> in /etc/firewalld/firewalld.conf.

It may be worth noting that most firewalld changes require two 
invocations of firewall-cmd, one with "--permanent" and one without:

# this makes an immediate change that will not last past next
# reboot or service restart
firewall-cmd --zone="public" --set-target="ACCEPT"

# this makes no immediate change, but it will take effect at
# next reboot or service restart
firewall-cmd --zone="public" --set-target="ACCEPT" --permanent

-- 
Paul Heinlein
heinlein at madboa.com
45°38' N, 122°6' W