Fedora Workstation firewall zone defaults: which inbound ports should stay open across releases?
Fedora Workstation ships with firewalld enabled and a default zone (historically named FedoraWorkstation ) that blocks unsolicited inbound traffic, yet has also allowed certain discovery-related ports such as mDNS and Samba client ranges. That choice sits between a fully closed inbound firewall and usability features like network discovery and media sharing,