firewalld 0.7.2

Just one little bit about 0.7.2:

since this release masquerading is off by default for IPv6. To get back to the old behaviour you have to manually insert one rich rule in the external zone:

firewall-cmd --permanent --zone=external --add-rich-rule="rule family=ipv6 masquerade"

…that actually cost me about one day to realize that this was the root cause of my network troubles after upgrading my firewall from 15.0 to 15.1…

firewalld for openSUSE

I have suggested firewalld from fedora/RHEL7 for inclusion in openSUSE, as an alternative for SuSEfirewall2 for setups with highly volatile networking.

test rpm packages for openSUSE 13.2 can be obtained here:





You will also need to enable the repository from here to get the dependencies.