Mailinglist Archive: opensuse-factory (437 mails)

< Previous Next >
Re: [opensuse-factory] Switching SuSEFirewall for iptables
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/28/2015 10:34 AM, Uzair Shamim wrote:
On 04/28/2015 04:59 AM, Marcus Meissner wrote:
On Tue, Apr 28, 2015 at 10:43:07AM +0200, Per Jessen wrote:
Uzair Shamim wrote:

I am trying to setup a machine with some docker containers
but the default suse firewall is interfering. Normally I
would just add the required rules to iptables for NAT and
forwarding but it seems suse firewall does not recognize the
interface connected to docker so I cannot add rules to allow
traffic to/from it. Is there a way to disable the
SuSEFirewall and just use plain old iptables?

Yep, that's exactly what you do - disable (or even uninstall)
the openSUSE firewall, then add your own iptables script.

What interface is detected? SuSEfirewall would probably put it
in the external zone by default.

Ciao, Marcus


@Per Jessen So its fine if I just disable the SuSEFirewall and
then build iptables as desired? Obviously I will have to add all
the rules I need but this wont cause any known issues? Sounds like
a plan.

Just tried this. There is no iptables service, how can I control
(start/stop) iptables?

- --
Regards,
Uzair Shamim
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=+I8a
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >