I wanted to allow SSH within my Ubuntu 16.04 machine from a specific MAC address. I've tried the following:
Removed ssh services from the default zone - "public":
firewall-cmd --zone=public --permanent --remove-service=ssh
Created a new zone:
firewall-cmd --permanent --new-zone=secure
Allowed SSH:
firewall-cmd --zone=secure --permanent --add-service=ssh
Added the MAC based access to access the ssh service:
firewall-cmd --zone=secure --permanent --add-source=5c:f3:fc:30:47:e7
When I execute the active zone display command, it shows my network adaptor is already in the 'secure' zone:
firewall-cmd --get-active-zones
secure
interfaces: enp1s0
sources: 5C:F3:FC:30:47:E7
But even after rebooting my Ubuntu machine, I can ssh from any machine on my network. What may be the issue?