{"action":"created","issue":{"url":"https://api.github.com/repos/mrash/fwknop/issues/129","labels_url":"https://api.github.com/repos/mrash/fwknop/issues/129/labels{/name}","comments_url":"https://api.github.com/repos/mrash/fwknop/issues/129/comments","events_url":"https://api.github.com/repos/mrash/fwknop/issues/129/events","html_url":"https://github.com/mrash/fwknop/pull/129","id":41601452,"number":129,"title":"Feature firewalld","user":{"login":"g-reno","id":803808,"avatar_url":"https://avatars.githubusercontent.com/u/803808?v=3","gravatar_id":"","url":"https://api.github.com/users/g-reno","html_url":"https://github.com/g-reno","followers_url":"https://api.github.com/users/g-reno/followers","following_url":"https://api.github.com/users/g-reno/following{/other_user}","gists_url":"https://api.github.com/users/g-reno/gists{/gist_id}","starred_url":"https://api.github.com/users/g-reno/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/g-reno/subscriptions","organizations_url":"https://api.github.com/users/g-reno/orgs","repos_url":"https://api.github.com/users/g-reno/repos","events_url":"https://api.github.com/users/g-reno/events{/privacy}","received_events_url":"https://api.github.com/users/g-reno/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2014-09-01T01:36:01Z","updated_at":"2015-11-25T01:56:14Z","closed_at":"2014-09-04T03:17:44Z","pull_request":{"url":"https://api.github.com/repos/mrash/fwknop/pulls/129","html_url":"https://github.com/mrash/fwknop/pull/129","diff_url":"https://github.com/mrash/fwknop/pull/129.diff","patch_url":"https://github.com/mrash/fwknop/pull/129.patch"},"body":"Fwknopd now supports RHEL 7, CentOS 7, and Fedora's firewalld.\r\n\r\nFirst checking that we didn't break iptables:\r\n```\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: Starting fwknopd\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: Added jump rule from chain: INPUT to chain: FWKNOP_INPUT\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: Added jump rule from chain: FORWARD to chain: FWKNOP_FORWARD\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: Added jump rule from chain: PREROUTING to chain: FWKNOP_PREROUTING\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: iptables 'comment' match is available\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: Sniffing interface: enp2s0\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: PCAP filter is: 'udp port 62202'\r\nAug 31 19:53:00 grp-01-23-03 fwknopd[18726]: Starting fwknopd main event loop.\r\n...\r\n...\r\nAug 31 20:08:12 grp-01-23-03 fwknopd[18726]: (stanza #1) SPA Packet from IP: 192.168.1.11 received with access source match\r\nAug 31 20:08:12 grp-01-23-03 fwknopd[18726]: Added Rule to FWKNOP_INPUT for 192.168.1.11, tcp/22223 expires at 1409530152\r\nAug 31 20:09:12 grp-01-23-03 fwknopd[18726]: Removed rule 1 from FWKNOP_INPUT with expire time of 1409530152\r\n```\r\nHere is same for firewalld:\r\n```\r\nAug 31 20:41:03 grp-01-23-03 fwknopd[24115]: Starting fwknopd\r\nAug 31 20:41:03 grp-01-23-03 firewalld: 2014-08-31 20:41:03 ERROR: COMMAND_FAILED: '/sbin/iptables -C INPUT -t filter -j FWKNOP_INPUT' failed: iptables v1.4.21: Couldn't load target `FWKNOP_INPUT':No such file or directory\r\n\r\nTry `iptables -h' or 'iptables --help' for more information.\r\nAug 31 20:41:03 grp-01-23-03 firewalld: 2014-08-31 20:41:03 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -F FWKNOP_INPUT' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:03 grp-01-23-03 firewalld: 2014-08-31 20:41:03 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -X FWKNOP_INPUT' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:04 grp-01-23-03 firewalld: 2014-08-31 20:41:04 ERROR: COMMAND_FAILED: '/sbin/iptables -C FORWARD -t filter -j FWKNOP_FORWARD' failed: iptables v1.4.21: Couldn't load target `FWKNOP_FORWARD':No such file or directory\r\n\r\nTry `iptables -h' or 'iptables --help' for more information.\r\nAug 31 20:41:04 grp-01-23-03 firewalld: 2014-08-31 20:41:04 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -F FWKNOP_FORWARD' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:04 grp-01-23-03 firewalld: 2014-08-31 20:41:04 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -X FWKNOP_FORWARD' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:04 grp-01-23-03 firewalld: 2014-08-31 20:41:04 ERROR: COMMAND_FAILED: '/sbin/iptables -C PREROUTING -t nat -j FWKNOP_PREROUTING' failed: iptables v1.4.21: Couldn't load target `FWKNOP_PREROUTING':No such file or directory\r\n\r\nTry `iptables -h' or 'iptables --help' for more information.\r\nAug 31 20:41:04 grp-01-23-03 firewalld: 2014-08-31 20:41:04 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -F FWKNOP_PREROUTING' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:05 grp-01-23-03 firewalld: 2014-08-31 20:41:05 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -X FWKNOP_PREROUTING' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:05 grp-01-23-03 firewalld: 2014-08-31 20:41:05 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -L FWKNOP_INPUT -n' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:05 grp-01-23-03 firewalld: 2014-08-31 20:41:05 ERROR: COMMAND_FAILED: '/sbin/iptables -C INPUT -t filter -j FWKNOP_INPUT' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:05 grp-01-23-03 fwknopd[24115]: Added jump rule from chain: INPUT to chain: FWKNOP_INPUT\r\nAug 31 20:41:06 grp-01-23-03 firewalld: 2014-08-31 20:41:06 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -L FWKNOP_FORWARD -n' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:06 grp-01-23-03 firewalld: 2014-08-31 20:41:06 ERROR: COMMAND_FAILED: '/sbin/iptables -C FORWARD -t filter -j FWKNOP_FORWARD' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:06 grp-01-23-03 fwknopd[24115]: Added jump rule from chain: FORWARD to chain: FWKNOP_FORWARD\r\nAug 31 20:41:06 grp-01-23-03 firewalld: 2014-08-31 20:41:06 ERROR: COMMAND_FAILED: '/sbin/iptables -t nat -L FWKNOP_PREROUTING -n' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:07 grp-01-23-03 firewalld: 2014-08-31 20:41:07 ERROR: COMMAND_FAILED: '/sbin/iptables -C PREROUTING -t nat -j FWKNOP_PREROUTING' failed: iptables: No chain/target/match by that name.\r\nAug 31 20:41:07 grp-01-23-03 fwknopd[24115]: Added jump rule from chain: PREROUTING to chain: FWKNOP_PREROUTING\r\nAug 31 20:41:07 grp-01-23-03 fwknopd[24115]: firewalld 'comment' match is available\r\nAug 31 20:41:08 grp-01-23-03 fwknopd[24115]: Sniffing interface: enp2s0\r\nAug 31 20:41:08 grp-01-23-03 fwknopd[24115]: PCAP filter is: 'udp port 62202'\r\nAug 31 20:41:08 grp-01-23-03 fwknopd[24115]: Starting fwknopd main event loop.\r\n...\r\n...\r\nAug 31 20:45:55 grp-01-23-03 fwknopd[24115]: (stanza #1) SPA Packet from IP: 192.168.1.11 received with access source match\r\nAug 31 20:45:56 grp-01-23-03 firewalld: 2014-08-31 20:45:56 ERROR: COMMAND_FAILED: '/sbin/iptables -t filter -N FWKNOP_INPUT' failed: iptables: Chain already exists.\r\nAug 31 20:45:56 grp-01-23-03 fwknopd[24115]: Added Rule to FWKNOP_INPUT for 192.168.1.11, tcp/22223 expires at 1409532415\r\nAug 31 20:46:55 grp-01-23-03 fwknopd[24115]: Removed rule 1 from FWKNOP_INPUT with expire time of 1409532415\r\n```\r\nfirewalld does a little more complaining but it adds the proper chains and rules and it works fine.\r\n"},"comment":{"url":"https://api.github.com/repos/mrash/fwknop/issues/comments/159462683","html_url":"https://github.com/mrash/fwknop/pull/129#issuecomment-159462683","issue_url":"https://api.github.com/repos/mrash/fwknop/issues/129","id":159462683,"user":{"login":"samayo","id":5304093,"avatar_url":"https://avatars.githubusercontent.com/u/5304093?v=3","gravatar_id":"","url":"https://api.github.com/users/samayo","html_url":"https://github.com/samayo","followers_url":"https://api.github.com/users/samayo/followers","following_url":"https://api.github.com/users/samayo/following{/other_user}","gists_url":"https://api.github.com/users/samayo/gists{/gist_id}","starred_url":"https://api.github.com/users/samayo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/samayo/subscriptions","organizations_url":"https://api.github.com/users/samayo/orgs","repos_url":"https://api.github.com/users/samayo/repos","events_url":"https://api.github.com/users/samayo/events{/privacy}","received_events_url":"https://api.github.com/users/samayo/received_events","type":"User","site_admin":false},"created_at":"2015-11-25T01:56:14Z","updated_at":"2015-11-25T01:56:14Z","body":"@mrash sorry for this noob question, but I could not find any install guide relating to CentOs7. All the tutorials are for 6.5. Is there any resource I can refer to? Thanks. "}}