I recently switched from
iptables-persistent to using
firewalld on my Ubuntu-based router (desktop install, not server). The first and only time I used netplan is when I set this machine up initially a few months back, so I don't have much hands-on experience with it:
network: version: 2 renderer: networkd wifis: wlo1: dhcp4: yes dhcp6: no nameservers: addresses: [18.104.22.168, 22.214.171.124] access-points: "SSID": password: "passphrase" ethernets: enp0s25: dhcp4: no bridges: br0: dhcp4: no addresses: - 192.168.10.1/24 interfaces: - enp0s25
The problem is, similar to this question,
firewalld warns me that 'br0 is under control of NetworkManager' despite clearly specifying
renderer: networkd in the
$ sudo firewall-cmd --permanent --change-zone=br0 --zone=internal The interface is under control of NetworkManager, setting zone to 'internal'. success
And just like the linked question,
sudo nmcli con modify br0 connection.zone internal is somehow not persistent across reboots even though it's supposed to be.
To summarize, I want to know why netplan is creating
br0 through NetworkManager, how to put it back in
networkd and if
networkd needs to specify the zone like NetworkManager for firewalld rules to apply.