search for: zone_conflict

Hi, In CentOS7 I have added two zones using firewall-cmd, each for different ports/services and interfaces when I try to --add-source to the second zone with an IP that is already in the first I am getting an 'Error: ZONE_CONFLICT' message. Am I trying to do something illogical or is this a feature? Cheers, Colin.

...:18, Colin Coles <colin at wemoto.com> wrote: > Hi, > In CentOS7 I have added two zones using firewall-cmd, each for > different ports/services and interfaces when I try to --add-source to > the second zone with an IP that is already in the first I am getting an > 'Error: ZONE_CONFLICT' message. Am I trying to do something illogical or > is this a feature? > > > By design a source network can only belong to a single zone... You'll have to create N zones to cover each network and add the service to each... You may be interested in reading https://www.hogarth...