When running

[root@host ~]# firewall-cmd --get-active-zones
[root@host ~]#
[root@host ~]# firewall-cmd --get-default-zone

I am not getting any active zones. How can I activate a zone?


You activate a zone by binding a network interface or source IP address range(s) to it. Any firewall rules in the zone then apply to that network interface or IP address range(s).

  • I also had to restart the service. – giorgio79 Jan 13 '16 at 23:02
  • You can do this via firewall-cmd --permanent --zone=public --change-interface=eth0 (for example). – negacao Jan 18 '17 at 12:59
  • 2
    I think --get-active-zones should print the default zone as well. Maybe as public (implicit) internal home or whatever. – bviktor Mar 21 '17 at 18:17

On a similar case, I took a peek with strace and realized, that FirewallD had somehow lost D-Bus access completely.

The easiest fix was to reboot the Linux. That helped and FirewallD saw active zones again.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.