I've got my direct rules, converted from a C6 iptables-save. I load them -
they're to add to the built-in FORWARD chain. They all seem to load... but
then, when I try to --reload, I get
Error: BUILTIN_CHAIN: chain 'FORWARD' is built-in chain
and firewall-cmd --direct --get-all-rules returns nothing. A sample
command in my script is
firewall-cmd --permanent --direct --add-rule ipv4 filter FORWARD 1 -m
state --state RELATED,ESTABLISHED -j ACCEPT
So, what am I doing wrong:
mark