0

I recently switched from iptables-persistent to using firewalld on my Ubuntu-based router (desktop install, not server). The first and only time I used netplan is when I set this machine up initially a few months back, so I don't have much hands-on experience with it:

network:
  version: 2
  renderer: networkd
  wifis:
    wlo1:
      dhcp4: yes
      dhcp6: no
      nameservers:
        addresses: [8.8.4.4, 8.8.8.8]
      access-points:
        "SSID":
          password: "passphrase"
  ethernets:
    enp0s25:
      dhcp4: no
  bridges:
    br0:
      dhcp4: no
      addresses:
        - 192.168.10.1/24
      interfaces:
        - enp0s25

The problem is, similar to this question, firewalld warns me that 'br0 is under control of NetworkManager' despite clearly specifying renderer: networkd in the .yaml:

$ sudo firewall-cmd --permanent --change-zone=br0 --zone=internal
The interface is under control of NetworkManager, setting zone to 'internal'.
success

And just like the linked question, sudo nmcli con modify br0 connection.zone internal is somehow not persistent across reboots even though it's supposed to be.

To summarize, I want to know why netplan is creating br0 through NetworkManager, how to put it back in networkd and if networkd needs to specify the zone like NetworkManager for firewalld rules to apply.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.