Opensuse 13.2 Yast firewall problems

English Network/Internet
1

Hi all,

With OS 13.1 I was able to setup a simple desktop firewall with Yast gui that allowed all incoming connections and disabled all services apart from ssh - I did this with a few simple clicks.

In OS 13.2, when I go to interfaces on the Yast firewall gui, there are no interfaces listed? If I do /sbin/ifconfig I get:

enp5s5    Link encap:Ethernet  HWaddr 00:06:4F:6D:37:FD  
          inet addr:192.168.1.72  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::206:4fff:fe6d:37fd/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:17591 errors:0 dropped:0 overruns:0 frame:0
          TX packets:16874 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:14674736 (13.9 Mb)  TX bytes:1928790 (1.8 Mb)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:48 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:2880 (2.8 Kb)  TX bytes:2880 (2.8 Kb)

From the above, enp5s5 is the network card connected to the router/internet (which also has wifi?), non of this comes up in the yast gui.

How do I setup a simple firewall in Yast for OS 13.2?

Cheers for any help.

2

I think Yast gui has serious problems in OS 13.2, I solved the problem by installing UFW (uncomplicated firewall), had a firewall setup in a few minutes.

3

Maybe you need to define the firewall zone for the applicable network devices in yast network settings first.

https://en.opensuse.org/SuSEfirewall2

4

This is pretty weird. Seems that the network interface doesn’t appear in yast Firewall panel.

Clutching a straw here: have a look in yast → network devices → network settings → Overview. See if the device appears there. If it does, then “edit” it → General Tab: Is it assigned to a zone in the firewall? If not, then assign it.

5

Yes, that’s what I was suggesting. (I have the same with openSUSE 13.1, where my wireless card is set as internal. So it does not appear in the firewall interface list either.)

6

I missed that, must be getting distracted.

You may have put your finger on the issue.

7

Hi,

is anybody looking into this ?

I have a same problem as described in the original message. In 13.1 all was well, but now network devices are not recognised.

Moderator do we need to raise a bug report?

8

I am not sure this addresses your issue but, I found this article that got my ssh client and server communicating on 13.2. Rather annoying but it did the job.
Check the Deamon section
https://wiki.archlinux.org/index.php/Secure_Shell#Client