[root@swaggserver-01 daniel]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: active (running) since Thu 2019-05-16 08:45:35 EDT; 3 weeks 4 days ago
Docs: man:firewalld(1)
Main PID: 4958 (firewalld)
Tasks: 2
Memory: 26.5M
CGroup: /system.slice/firewalld.service
└─4958 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -D FORWARD -i docker0 -o docker0 -j DROP' ...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 -o docker0...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -i docker0 ! -o docke...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -j DOCKER'...at name.
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -o docker0 -m conntra...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C DOCKER-ISOLATION-STAGE-1 -i d...at name.
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C DOCKER-ISOLATION-STAGE-2 -o d...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -n -L DOCKER-USER' failed: iptab...at name.
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C DOCKER-USER -j RETURN' failed...chain?).
May 16 08:45:57 swaggserver-01 firewalld[4958]: WARNING: COMMAND_FAILED: '/usr/sbin/iptables -w2 -t filter -C FORWARD -j DOCKER-USER' faile...at name.
Hint: Some lines were ellipsized, use -l to show in full.
[root@swaggserver-01 daniel]# firewall-cmd --list-all
You're performing an operation over default zone ('public'),
but your connections/interfaces are in zone 'dmz,internal' (see --get-active-zones)
You most likely need to use --zone=dmz option.
public
target: default
icmp-block-inversion: no
interfaces:
sources:
services: ssh dhcpv6-client
ports:
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
[root@swaggserver-01 daniel]# firewall-cmd --get-default-zone
public
[root@swaggserver-01 daniel]# firewall-cmd --list-all --zone=public
public
target: default
icmp-block-inversion: no
interfaces:
sources:
services: ssh dhcpv6-client
ports:
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules: