I can't configure firewalld with my custom rule xml

Question

Centos7:

I dropped my xml in /etc/firewalld/services when running firewall-cmd --permanent --zone=public --add-service=rules.xml all i get is "Error: INVALID_SERVICE: rules"

When running firewall-cmd --permanent --get-servicesit doesn't list my xml rules.

What do i need to do to get my service recognized?

Solution

Try reloading your firewalld with service commands:

# service firewalld restart

and remove .xml extension from --add-service option

Comments

[Marc]

one additional change I had to make was remove any/all xml comments (ie, <!--- bleh --->)