I just installed Fedora 23 Server. I have a single zone created by default:
# firewall-cmd --get-active-zones
FedoraServer
interfaces: eth0
If I add a service to this zone, it works fine:
# firewall-cmd --zone=FedoraServer --add-service=http
success
# firewall-cmd --zone=FedoraServer --list-all
FedoraServer (default, active)
interfaces: eth0
sources:
services: dhcpv6-client http ssh
ports:
masquerade: no
forward-ports:
icmp-blocks:
rich rules:
But it is lost when running firewall-cmd --reload
.
If I try to make it permanent as suggested in this answer, I get the following error:
# firewall-cmd --zone=FedoraServer --add-service=http --permanent
Error: INVALID_SERVICE: 'cockpit' not among existing services
I'm surprised as this is a fresh installation from an OVH template.
How to work around this error?
Best Answer
As suggested by Michael Hampton in the comments, this seems to be specific to the OVH Fedora 23 Server template.
I searched for
cockpit
in/etc
, and found the following file:Which contains the following lines:
I removed this line and saved the file:
And it now works!
They basically seem to have added a default service to firewalld, that is not installed in their template.