Cleaning up my YaST Firewall

[arvidjaar]

@suse_rasputin

where are these zones defined?

In firewalld

@suse_rasputin

In the YaST plugin maybe?

YaST plugin edits firewalld configuration.

@deano_ferrari

NM can override the zone settings.

Because it sounds very ambiguous - NM cannot override zone content (what ports, services are open in this zone etc). All that NM does it telling firewalld to associate the interface where a given connection is activated with the zone defined in this connection properties (or default zone if nothing is defined).

[deano_ferrari]

Yes, as I already said.

[deano_ferrari]

Firewalld documentation:

Connections, Interfaces and Sources