Re: [atomic-devel] firewalld in atomic host

[Dusty Mabe <dusty dustymabe com>]

On 04/21/2017 10:16 AM, Dusty Mabe wrote:
> NOTE: if you respond to this message please 'reply-all'.
> 
> I'd like to discuss firewalld on atomic host. Recently I was trying to
> figure out the best way to explain to other users how to set firewall rules
> on atomic host.
> 
> Usually I would say add your rules and then iptables-save, but on Atomic
> Host docker has added it's firewall rules in there dynamically so if you iptables-save
> you'll get a bunch of stuff that you don't want in your static configuration.
> 
> There are ways around this; manually create your config file, or use iptables-save
> and then rip the docker stuff out. Either way it's a bit of a pain. I think 
> firewalld would make this easier on the user. Not sure of the pro/con ratio though.
> 

reviving this old discussion: I am proposing we add firewalld do atomic host:
 
https://pagure.io/atomic-wg/issue/372