From fb15854e3e7ff889a63cfefb0b67cfc827d47703 Mon Sep 17 00:00:00 2001 From: Bill Nottingham Date: Fri, 7 Dec 2012 15:57:07 -0500 Subject: Also do firewall zone poking before ifup-ipv6, for DHCPv6 (#802415, modified from ) --- sysconfig/network-scripts/ifup-eth | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'sysconfig') diff --git a/sysconfig/network-scripts/ifup-eth b/sysconfig/network-scripts/ifup-eth index 4692f63e..032f6000 100755 --- a/sysconfig/network-scripts/ifup-eth +++ b/sysconfig/network-scripts/ifup-eth @@ -289,6 +289,11 @@ if [ -z "${NOZEROCONF}" -a "${ISALIAS}" = "no" -a "${REALDEVICE}" != "lo" ]; the ip route add 169.254.0.0/16 dev ${REALDEVICE} metric $((1000 + $(cat /sys/class/net/${REALDEVICE}/ifindex))) scope link fi +# Inform firewall which network zone (empty means default) this interface belongs to +if [ -x /usr/bin/firewall-cmd -a "${REALDEVICE}" != "lo" ]; then + /usr/bin/firewall-cmd --zone="${ZONE}" --change-interface="${DEVICE}" > /dev/null 2>&1 +fi + # IPv6 initialisation? /etc/sysconfig/network-scripts/ifup-ipv6 ${CONFIG} if [[ "${DHCPV6C}" = [Yy1]* ]] && [ -x /sbin/dhclient ]; then -- cgit v1.2.1