"Workstation" Product defaults to wide-open firewall

Bastien Nocera bnocera at redhat.com
Tue Dec 9 11:04:09 UTC 2014



----- Original Message -----
> 
> > >
> > >
> > > sudo firewall-cmd --set-default-zone=FedoraServer
> > > That will limit it to SSH, DHCPv6 and cockpit
> > >
> > > Or use default zone "Public", which swaps cockpit out and adds mDNS
> > >
> > > Or if you're "Reindl Harald"-level paranoid (no offense intended, Harald
> > > but you're the most paranoid sysadmin I know, even more than me):
> > >
> > > sudo firewall-cmd --set-default-zone=block
> > 
> > It always amaze me why people that says it is easy to change de default,
> > were not happy with:
> > 
> > sudo firewall-cmd --set-default-zone=OpenZone
> > 
> > instead of forcing the less secure one to eveyone.
> 
> I also thought that the whole points of having Zones etc, was so that
> we could pick a different zone per network connection,
> 
> so if I'm in the office or at home I can say use this zone, if I'm
> at a coffee shop I can pick a different one etc.
> 
> Or was this consider too much UI for the normal user? Surely
> OSX has something to copy from, since they seem to define what
> a normal user expects.

OSX has a firewall integration that I would rank as "awful". It's not
any better than what we had in Fedora 20 (blocking firewall and a tool
to open up ports).


More information about the devel mailing list