Mailinglist Archive: opensuse-factory (808 mails)
| < Previous | Next > |
Re: [opensuse-factory] Integration of firewalld?
- From: Ludwig Nussel <ludwig.nussel@xxxxxxx>
- Date: Tue, 02 Aug 2011 08:54:06 +0200
- Message-id: <4E379F0E.7090403@suse.de>
Frederic Crozat wrote:
The need for that will mostly vanish as soon as network connections
(rather then network interfaces) have firewall zones attached. When
connecting to a new network NM would ask whether you are connected
to e.g. your home network or some untrusted public one. The former
choice would just map to the internal zone ie no filtering,
therefore no problems.
cu
Ludwig
--
(o_ Ludwig Nussel
//\
V_/_ http://www.suse.de/
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB
16746 (AG Nürnberg)
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
Le lundi 01 août 2011 à 16:28 +0200, jdd a écrit :
Le 01/08/2011 15:00, Ludwig Nussel a écrit :
Well, I could implement something like that for SuSEfirwall2/fwzs
(using service definitions instead of ports though) but I'm not sure
it's good behavior anyways. Users are not supposed to punch holes in
the external zone just because they wanted to print once.
it's somewhat necessary only for printers detection and no more after that
Not only for printers. We have several locations in Yast which states
"you might need to lower / punch firewall for this autodetection to
work". It would be better for an usuability PoV for Yast to talk to the
firewall and punch it just for the autodetection.
The need for that will mostly vanish as soon as network connections
(rather then network interfaces) have firewall zones attached. When
connecting to a new network NM would ask whether you are connected
to e.g. your home network or some untrusted public one. The former
choice would just map to the internal zone ie no filtering,
therefore no problems.
cu
Ludwig
--
(o_ Ludwig Nussel
//\
V_/_ http://www.suse.de/
SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB
16746 (AG Nürnberg)
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
| < Previous | Next > |