OK, it turns out that enabling masquerading on the zone is preventing traffic to 127.0.0.1
So, what I have done is set up 2 zones - external
and internal
. I assigned the lo
interface to the internal
zone and the NIC (eno1
) to the external
zone.
I then left masquerading enabled on the external
zone, but disabled it for the internal
zone, allowing traffic to the lo
interface (127.0.0.1
) through.
Not sure if this is the correct/best way to do it, so I welcome any comments!
Hope this helps others.