Per Jessen wrote:
Peter Suetterlin wrote:
The issue with this script (see Carlos' other post) is that it does 'surgery on the open heart'. You have to run it on the machine you want to convert, and it shuts down the old firewall, then (hopefully) builds a new setup for firewalld.
It can't be run off-line on a copy of your old firewall?
Don't think so. It goes ahead actually doing firewalld comands, i.e., set up a real firewall. So your test machine would have to have the same network setup to produce something reasonable, no?
Not really something you just want to try on your server to see if it does the right thing....
Where you might not want to be running Leap15 beta either, to see if it does the right thing :-)
Sure not. But at some time you're supposed to update your old 42.3 to then-stable 15.0 - and by then a suitable update path has* to be there for critical machines....
I think there is really just one key issue - what happens in the upgrade situation?
That's for the switch, yes. But even start from scratch: The old /etc/sysconfig/SuSEfirewall2 gave very good instructions how to tweak the firewall and adapt it to your needs. A similar guidance for the user should be in place for 15.0, too. Both for completely new users, and also for those who so far only used SFW2. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org