"Workstation" Product defaults to wide-open firewall

[Kevin Kofler]

Stephen Gallagher wrote:
> Also, while I think it's been unclear in this thread, the main reason
> that the firewall GUI was taken out was because the Workstation guys
> want to design a more user-understandable one and include that directly
> (if I am remembering that conversation correctly). The current one is
> not terribly easy to understand (though it's certainly an improvement
> over s-c-firewall).

Huh? Especially the last part really makes me go "huh?". System-config-
firewall is dead simple to use: I want service S to work, I check the box 
for service S if it's one of the common ones, or pick service S from the 
full /etc/services list if it's an uncommon one, or enter its port manually 
if it's some nonstandard service listening on an arbitrary port. I don't see 
how the UI can be any simpler.

firewall-config is only complicated because firewalld is overly complex.

        Kevin Kofler