When running
[root@host ~]# firewall-cmd --get-active-zones
[root@host ~]#
[root@host ~]# firewall-cmd --get-default-zone
public
I am not getting any active zones. How can I activate a zone?
Add a comment
|
3 Answers
You activate a zone by binding a network interface or source IP address range(s) to it. Any firewall rules in the zone then apply to that network interface or IP address range(s).
answered Jan 13, 2016 at 22:58
-
1
-
1You can do this via
firewall-cmd --permanent --zone=public --change-interface=eth0(for example).– user395771Jan 18, 2017 at 12:59 -
3I think
--get-active-zonesshould print the default zone as well. Maybe aspublic (implicit) internal homeor whatever.– bviktorMar 21, 2017 at 18:17 -
1You need a
firewall-cmd --reloadafter change interface command @negacao said to commit changes.– alizeynMay 7, 2020 at 10:22
On a similar case, I took a peek with strace and realized, that FirewallD had somehow lost D-Bus access completely.
The easiest fix was to reboot the Linux. That helped and FirewallD saw active zones again.
I had the same question, except I had definitely had an interface in a zone. For me I had to restart the firewalld service.
