F21 System Wide Change: Workstation: Disable firewall

[Simo Sorce]

On Tue, 2014-04-15 at 13:49 -0700, Matthias Clasen wrote:
> 
> You have connected to an new network. If this is a public network, you
> may want to stop sharing your Music and disable Remote Logins.
> [Turn off sharing] [Continue sharing] [Sharing Preferences...]

So if you have 4 different services you gfet flooded with a ton of
questions ?

Sounds like a bad idea.

> And we will remember this for when you later reconnect to the same
> network.

If you set a *zone* instead then you have to remember only one
association: network -> zone, and you know where to go to change that,
and to change in which zones an application is allowed to listen,
instead of having tens of one offs.

> When we have this infrastructure, we can use this information to also
> set the network zone to Home/Public - I don't think the long list of
> zones I showed above makes any sense. Either you are at home and
> comfortable sharing the network, or not.

A long list does not make sense by default, ideally the default is that
you have only 2 zones: trusted/untruuted (you can choose whatever
names), if the users wants more flexibility then they would create new
zones (like home, work, cafe, library, etc..) perhaps by cloning
existing ones and then tweak the list of applications allowed to serve
content in those zones.
It would be better if the association were per-application rather then
nameless ports.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York