Version-Release number of selected component (if applicable): firewalld-0.2.5-1.fc17.noarch How reproducible: # firewall-cmd --get-active-zones home: p9p1 public: eth1 # firewall-cmd --zone=external --add --interface=ppp0 Error: COMMAND_FAILED: '/sbin/iptables -N FWDO_ZONE_external -t filter' failed: iptables: Chain already exists. # firewall-cmd --get-active-zones home: p9p1 public: eth1 # iptables-save | grep FWDO_ZONE_external :FWDO_ZONE_external - [0:0] -A FORWARD_ZONES -o ppp0 -j FWDO_ZONE_external -A FWDO_ZONE_external -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu :FWDO_ZONE_external - [0:0] :FWDO_ZONE_external_allow - [0:0] :FWDO_ZONE_external_deny - [0:0] -A FWDO_ZONE_external -j FWDO_ZONE_external_deny
with table names # iptables-save | egrep '\*|FWDO_ZONE_external' *nat *mangle :FWDO_ZONE_external - [0:0] -A FORWARD_ZONES -o ppp0 -j FWDO_ZONE_external -A FWDO_ZONE_external -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu *filter :FWDO_ZONE_external - [0:0] :FWDO_ZONE_external_allow - [0:0] :FWDO_ZONE_external_deny - [0:0] -A FWDO_ZONE_external -j FWDO_ZONE_external_deny
I'm not able to reproduce this. Have you maybe somehow customized firewalld, i.e. have you changed anything in /etc/firewalld ?
i can't reproduce it either
I can not reproduce this also, closing as WORKS FOR ME.