c2e602b9fa
Upstream enabled forward [1] by default for stock zones in v1.0.0. FedoraServer and FedoraWorkstation should follow upstream. This fixes some out of the box issues for users. e.g. wireguard doesn't work until user does `firewall-cmd --add-forward` With this enabled wireguard and other VPNs will work out of the box. [1]: https://firewalld.org/2020/04/intra-zone-forwarding
12 lines
538 B
XML
12 lines
538 B
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<zone>
|
|
<short>Fedora Workstation</short>
|
|
<description>Unsolicited incoming network packets are rejected from port 1 to 1024, except for select network services. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.</description>
|
|
<service name="dhcpv6-client"/>
|
|
<service name="ssh"/>
|
|
<service name="samba-client"/>
|
|
<port protocol="udp" port="1025-65535"/>
|
|
<port protocol="tcp" port="1025-65535"/>
|
|
<forward/>
|
|
</zone>
|