Skip to content

how do I disable firewall[d]

Software environment

  • Operating system: Fedora
  • Architecture: amd64
  • kernel version: 6.6.12
  • libvirt version: libvirt-client-9.7.0 et.al.
  • Hypervisor and version: linux

Description of problem

I'm building an Isolated Virtual Network looking something like:

<network ipv6='yes'>
  <name>w.192_0_3</name>
  <uuid>6c2d34e7-491b-4085-a6a3-2b4847c54238</uuid>
  <bridge name='w.192_0_3' stp='on' delay='0'/>
  <mac address='52:54:00:93:4c:0a'/>
</network>

It's part of libreswan's IPsec test framework. There are hundreds of these interfaces and I'd like them to not have a firewall:

  • the're isolated
  • arguably, the firewall could get in the way of some of the more vindictive tests
  • trying to create/start all these interfaces has sub-optimal performance while all the firewalls are configured

but I can't see a way to do this.

They are created using net-create (they were created using define/start which dug an even deeper hole after a reboot).

The only potential workaround I know is to remove firewalld but that strikes me as wrong as I really like the firewall rules on the non-isolated networks.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information