Fedora Workstation and disabled by default firewall

[Vitaly Zaitsev]

Hello all.

Is it okay that firewall is completely disabled by default (opened all
ports 1025-65535) on Fedora Workstation?

I think that this is a major vulnerability and it must be fixed by
changing default zone to public.

firewall-cmd --list-all
FedoraWorkstation (active)
  target: default
  icmp-block-inversion: no
  interfaces: enp1s0
  sources:
  services: dhcpv6-client mdns samba-client ssh
  ports: 1025-65535/udp 1025-65535/tcp
  protocols:
  masquerade: no
  forward-ports:
  source-ports:
  icmp-blocks:
  rich rules:

-- 
Sincerely,
  Vitaly Zaitsev (vitaly(a)easycoding.org)