home user via users <users@lists.fedoraproject.org> wrote:
> > I gather from the Fedora docs that I should use firewalld or
> > firewalld-config.  I have both.  But Fedora docs does not give me
> > enough detail.  I am not an IT professional.  What specifically
> > should I do to keep unwanted people and things out?

Barry Scott:
> Given you are directly connected to the internet you will need to
> review the firewalld rules.

Or, simply pick a suitable ruleset in the firewall.

On Fedora a "public" zone means connection to public services that you
don't trust, and I believe it is the default choice.  It blocks just
about everything, except for the things you'll need (DHCP, for
instance).

A home zone would be when you're part of a home LAN that you do trust
everything on it (it's all under your control).  It's probably not the
best choice of name, as a home user might presume they should pick it
because they're at home.

If you had a home PC with multiple interfaces.  You could set a public
zone on the interface facing the internet, and home zone on one facing
your LAN.  But probably most home users don't have a multi-interface
PC.  Their modem/router is probably a hub for the whole house.

There'll be a lot of home users that don't really do networking between
their devices.  Their PC in the lounge doesn't interact with the PC in
the study, they don't share files, they don't browse each other, they
all just use the internet.  So a public ruleset will be fine for them.

They may use a networked printer (though, apparently, printing at home
is becoming less common), in which case you can poke a hole in the
firewall for a printer.  Some of the firewall configurators make that
relatively easy to do.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to