Thanks for the input, David.

On Tue, Aug 27, 2019 at 2:37 PM, David Kaufmann <astra@ionic.at> wrote:
If there is a switch to "default reject" it is also very important that the process to open up a port is easier than to disable the firewall completely or injecting an "accept anything" rule. (e.g. by documenting how to open ports in the installation instructions)

This seems like a particularly important point. We used to have users disabling the firewall since it's a lot easier to do that than to figure out what port needs to be opened to make an app work (assuming the user even knows what a port is).