Score:0

Centos 7 OpenVPN - FirewallD keeps putting tun0 in the wrong zone on reboot

cn flag

I have a fresh install of Centos 7 and I have several things running on it. One of them is OpenVPN. Everything works fine, I have tun0 in the trusted zone and my nic (eno1) is public. Server is behind a router/firewall so I do not need to setup anything complicated and all traffic goes over eno1. tun0 has a masquerade to public (eno1). VPN Clients work fine. If I reboot, FirewallD puts the tun0 interface in the public zone instead of the trusted zone although I used the --permanent option. This causes the entire network stack to fail for some reason and the only way I can get back in to make the change is over the local console. How do I get FirewallD to keep the tun0 interface in trusted over a reboot? Thanks!

Score:0
it flag

It sounds like you might be hitting https://bugzilla.redhat.com/show_bug.cgi?id=1112742.

Try adding ZONE=trusted to /etc/sysconfig/network-scripts/ifcfg-tun0.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.