Fedora workstation: what do we want installed by default?

[Elad Alfassa]

On Mon, Aug 18, 2014 at 10:36 PM, Richard Turner <rjt at zygous.co.uk> wrote:

> On 18 Aug 2014 20:02, "Elad Alfassa" <elad at fedoraproject.org> wrote:
> > 3) Do we really need a firewall configuration UI?
>
> What do you propose instead? If there's a firewall installed I don't want
> to have to learn how to use iptables, or any other CLI tool, to configure
> it. I'm a web developer, that doesn't mean I'm a networking guru.
>
>
I propose configuration that works out of the box.

Right now in the firewalld policy in Fedora Workstation any non-root port
is unblocked by default. If you need a webserver running on port 80, I
assume the best way of fixing this would be bundling a firewalld
configuration file in webserver packages that will open port 80 and port
443 for you - but that might be out of scope for the Workstation WG and
more in the Server WG realm.

Also, if we don't install it by default you'd still be able to install it,
or install cockpit instead (I don't remember if cockpit has firewall
controls, but it sounds like it's something it probably would benefit from
having).


-- 
-Elad Alfassa.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/desktop/attachments/20140818/d48d8110/attachment.html>