.`firewalld` was rebased to version 1.1.1
The `firewalld` packages have been upgraded to version 1.1.1. This version provides multiple bug fixes and enhancements over the previous version:
New features:
* Rich rules support NetFilter-log (NFLOG) target for user-space logging. Note that there is not any NFLOG capable logging daemon in RHEL. However, you can use the `tcpdump -i nflog` command to collect the logs you need.
* Support for port forwarding in policies with `ingress-zones=HOST` and `egress-zones={ANY, _source based zone_}`.
Other notable changes include:
* Support for the `afp`, `http3`, `jellyfin`, `netbios-ns`, `ws-discovery`, and `ws-discovery-client` services
* Tab-completion and sub-options in Z Shell for the `policy` option
$ git shortlog --grep="^feat" v1.0.0..upstream/master
Christoph Muellner (1):
feat(service): Add jellyfin service
Eric Garver (4):
feat: add netbios-ns service
feat(firewalld): drop linux capabilities
feat(build): distribute an OCI container image
feat(policy): support OUTPUT forward ports
Juan Orti Alcaine (1):
feat(service): add http3
Marcos Mello (1):
feat(service): add service definition for WS-Discovery Client
Nigel Jewell (2):
feat(service): add service definition for WS-Discovery
feat(service): add service definition for AFP
TorontoMedia (1):
feat(rich): Support nflog target and add log attribute errors/checks
张龙涛 (2):
feat(shell-completion): Add zsh completion of policy
feat(shell-completion/zsh): add sub option for --policy
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (firewalld bug fix and enhancement update), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHBA-2022:8389
$ git shortlog --grep="^feat" v1.0.0..upstream/master Christoph Muellner (1): feat(service): Add jellyfin service Eric Garver (4): feat: add netbios-ns service feat(firewalld): drop linux capabilities feat(build): distribute an OCI container image feat(policy): support OUTPUT forward ports Juan Orti Alcaine (1): feat(service): add http3 Marcos Mello (1): feat(service): add service definition for WS-Discovery Client Nigel Jewell (2): feat(service): add service definition for WS-Discovery feat(service): add service definition for AFP TorontoMedia (1): feat(rich): Support nflog target and add log attribute errors/checks 张龙涛 (2): feat(shell-completion): Add zsh completion of policy feat(shell-completion/zsh): add sub option for --policy