Firewall keeps re-enabling itself

[DiBosco]

Folks,

Any idea why my firewall would keep switching itself back on please?

Thanks!

[sturmvogel]

Could you at least add a basic failure description? What are you doing how and where and what is the result…

[doktor5000]

Well, how did you disable it and what is your firewall in particular ?

[DiBosco]

I didn't know there was more than one!

Just ticked disable in the firewall in the security section of MCC.

It keeps unticking itself!

[doktor5000]

Untick here? https://doc.mageia.org/mcc/9/en/content ... akfirewall
You'd need to enable the first box "Everything (no firewall)" and then still click through the normal dialog to apply this to all network interfaces.

It would help if you would add a screenshot what you actually click and what keeps unticking.

[DiBosco]

On this screen I select Everything (No Firewall). The only way to come out of this screen, BTW, is to hit the top right hand cross. Clicking OK does nothing. The next time I reboot it's cleared itself and the firewall is on again.

I would do an actual screen shot but Mageia Control Centre won't load after the latest updates, just shows a blank screen.

[doktor5000]

The only way to come out of this screen, BTW, is to hit the top right hand cross. Clicking OK does nothing. The next time I reboot it's cleared itself and the firewall is on again.

No it's not, then something is broken on your box. After the OK dialog you can configure the interactive firewall and custom selected ports:

Then you need to select which of your interfaces the selected firewall rules should be applied upon.

[DiBosco]

OK, neither my laptop nor my desktop allow me to click through to the next screen!

[doktor5000]

If you just want to disable the firewall without MCC then the following should do it

Code: Select all

systemctl disable --now shorewall shorewall6

Then check if all rules have been cleared:

Code: Select all

iptables -L -v -n

edit doktor5000: IIRC you also need to flush iptables once and apply the default accept policy to the 3 default chains input, output and forward.

Code: Select all

iptables -F
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

See e.g. https://bash.cyberciti.biz/security/she ... -firewall/

That doesn't take care about the interactive firewall applet (mandi-ifw), but the firewall itself will stay disabled.

[DiBosco]

More than happy to use the command line, will give that a go, thank you