plasma-firewall pulls in firewalld resulting in blocking any access from outside to the machine (was: Re: Plasma 6 coming to unstable)

[Steven Robbins]

On Friday, November 29, 2024 2:57:11 A.M. CST Martin Steigerwald wrote:

> Steven Robbins - 29.11.24, 07:40:38 MEZ:
> > I have a question about firewalld.  I did not have it installed before.
> > It seems it got pulled in with the plasma upgrade, is that possible?
 
> I mentioned it before on debian-kde:
> https://lists.debian.org/debian-kde/2024/11/msg00023.html

Indeed you did, but I missed it.  However, your topic was ssh while mine was 
imap, so I'm not sure I would have benefited from having read it.  :-)

What I didn't appreciate until I got to the bottom of things was that 
installing firewalld radically changes the system.  For 30 years, I've run my 
systems at home wide open -- behind a hardware firewall on the modem/router, 
but with no software firewall.  It seems to me that installing firewalld changes 
the model from open by default  to closed by default -- like Windows does.  Is 
this accurate?
 
> I wonder whether it makes sense to lower the recommends to a suggest.
> 
> On the other hand for a desktop machine blocking everything could be seen
> as a great default. 

Probably true, given the state of the net today.

> Maybe something to be mentioned in NEWS.Debian, so
> apt-listchanges can pick it up? Something for release notes?

I totally support some form of alerting to those upgrading.  

-Steve
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-kde-talk/attachments/20241130/fa940d27/attachment.sig>