Bug 961974

Summary: Unable to permanently add port range using firewall-cmd
Product: [Fedora] Fedora Reporter: Krishna Raman <kraman>
Component: firewalldAssignee: Thomas Woerner <twoerner>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: jpopelka, mfisher, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-05-20 08:55:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Krishna Raman 2013-05-10 21:13:38 UTC
Description of problem:
Unable to permanently add port range using firewall-cmd

Version-Release number of selected component (if applicable):
Version     : 0.3.2
Release     : 1.fc19

How reproducible:
always

Steps to Reproduce:
1./usr/bin/firewall-cmd --zone=public --list-ports
    35536/tcp 35531-65534/udp 8443/tcp 27017/tcp 8000/tcp 61613/tcp

2./usr/bin/firewall-cmd --zone=public --permanent --add-port=35531-65534/tcp
3./usr/bin/firewall-cmd --zone=public --list-ports

  
Actual results:
    35536/tcp 35531-65534/udp 8443/tcp 27017/tcp 8000/tcp 61613/tcp

Expected results:
    35536/tcp 35531-65534/udp 8443/tcp 27017/tcp 8000/tcp 61613/tcp 35531-65534/tcp


Additional info:

Comment 1 Jiri Popelka 2013-05-11 02:56:27 UTC
(In reply to comment #0)
> 2./usr/bin/firewall-cmd --zone=public --permanent --add-port=35531-65534/tcp

With --permanent you basically just change the stored configuration.
You don't change the runtime configuration.
If you want this change to become active immediately you either have to
change it also in runtime configuration with:
firewall-cmd --zone=public --add-port=35531-65534/tcp
or reload the stored configuration with:
'firewall-cmd --reload'

> 3./usr/bin/firewall-cmd --zone=public --list-ports

Does it show the port range when you do one of the steps mentioned above ?

Comment 2 Jiri Popelka 2013-05-20 08:55:56 UTC

*** This bug has been marked as a duplicate of bug 879832 ***