http://bugzilla.suse.com/show_bug.cgi?id=1149885 Bug ID: 1149885 Summary: Firewalld package should be updated to 0.7.1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: bnc-team-screening@forge.provo.novell.com Reporter: aboe76@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 817311 --> http://bugzilla.suse.com/attachment.cgi?id=817311&action=edit libvirt firewalld zone with rich rule priorities At the moment firewalld package is at version 0.6.3 Upstream has released version 0.7.0 and bugfix release 0.7.1 With > 0.7.0 we get the following new features: - Rich Rule Priorities - Service Definition Includes Service definitions can now include lines like: <include service="https"/> which will include all the ports, etc from the https service. - RFC3964 IPv4 filtering A new option RFC3964_IPv4 in firewalld.conf is available. It does filtering based on RFC3964 in regards to IPv4 addresses. This functionality was traditionally in network-scripts. - FlushAllOnReload A new option FlushAllOnReload in firewalld.conf is available. Older releases retained some settings (direct rules, interface to zone assignments) during a --reload. With the introduction of this configuration option that is no longer the case. Old behavior can be restored by setting FlushAllOnReload=no. - 15 new service definitions The patch 0002-Add-FlushAllOnReload-config-option.patch is not necessary anymore. after this update the following from libvirt should work: https://github.com/libvirt/libvirt/blob/master/src/network/libvirt.zone which uses the rich rule priorities. attachment the file for libvirt firewalld zone. -- You are receiving this mail because: You are on the CC list for the bug.