Re: firewall-cmd option to list complete effective configuration?

[Kenneth Porter]

--On Friday, November 04, 2022 5:31 PM +0300 Andrei Borzenkov 
 wrote:
> I routinely see questions related to firewall on forums which cannot be
> answered without seeing the actual configuration. Unfortunately firewalld
> does not seem to offer any simple way to list it.

I use the back-end's commands to dump the "real" firewall. Like 
"iptables-save" or "iptables -L -v -n". It's a bit like debugging a C++ 
program by looking at the generated assembly language. I've done that when 
chasing a compiler optimizer bug back in the 90s. (Compilers tend to be 
much better now.)