Re: Firewall configuration, confused.

If you set the zone via YaST, do changes persist across reboots? I am aware there are some difficulties between Network-Manager and YaST system (and a host of /different/ issues with Wicked), but am not incredibly well versed on the internal functions of either. I tend to shy away from the Network-Manager GUI for configuring anything deeper than “Wifi On/Off", as it feels buggy in my experience and is prone to interesting visual quirks.

On Mar 18, 2021, at 15:52, James Knott wrote:

On 2021-03-18 3:40 p.m., Cameron Cumberland wrote:

...

Is this through YaST, or through the Network-Manager GUI?

Through the network manager gui. However, it appears the problem is the firewall is not starting, even though it's configured to start on boot. If I manually start it, I see the zone choices in the Wifi config. But then after reboot the firewall is not running again.

...

I’ve set a number of rules for networks (wired, wireless) through the YaST interface: (Networking > Firewall).

It’s not the most intuitive UI, but assigning networks based on the interface was mostly straightforward with my very-basic skill level.

I’m not sure there are per-SSID zone rules, but that would be an amazing feature as well. Best I can think of would are through the Network-Manager GUI, various settings like “Always Connect to VPN on this Network” and the like.

If you’re not root, settings don’t stick. On KDE, it’s possible there’s a pop-under requesting authentication for Network-Manager. On Gnome, I’m not sure.

...

On Mar 18, 2021, at 15:27, James Knott wrote:

On 2021-03-18 1:50 p.m., Andrei Borzenkov wrote:

...

...

Also, it would be nice if WiFi SSID could be considered in setting zones. NetworkManager can set zone per connection.

It doesn't stick. I set my home WiFi to home zone and rebooted. It was not selected when I then checked. Also, it appears there's a drop down box for selecting the zone, but there's nothing to choose from.

Cameron 柯智明 只要努力,就能成功 With hard work, success is possible.