I just installed Fedora 23 Server. I have a single zone created by default:
# firewall-cmd --get-active-zones
FedoraServer
interfaces: eth0
If I add a service to this zone, it works fine:
# firewall-cmd --zone=FedoraServer --add-service=http
success
# firewall-cmd --zone=FedoraServer --list-all
FedoraServer (default, active)
interfaces: eth0
sources:
services: dhcpv6-client http ssh
ports:
masquerade: no
forward-ports:
icmp-blocks:
rich rules:
But it is lost when running firewall-cmd --reload
.
If I try to make it permanent as suggested in this answer, I get the following error:
# firewall-cmd --zone=FedoraServer --add-service=http --permanent
Error: INVALID_SERVICE: 'cockpit' not among existing services
I'm surprised as this is a fresh installation from an OVH template.
How to work around this error?