Am Sat, 22 Jun 2024 06:04:24 -0600 schrieb R C cjvijf@gmail.com:
(on a side note, what would be more 'expensive' for the firewall to implement, a port opened with "|firewall-cmd --add-port=22/tcp" or have a rich rule that does the same thing for a set of source IPs?)
I assume (I haven tested) the rich.rule with the source IPs will need more resources. It needs additional checks for the IP addresses.