Can Yunohost block inbound traffic on ports 80 and 443 by default?

Yunohost default port exposure

During the initial installation Yunohost opens ports 80 and 443 so that the web interface and any future applications can accept HTTP and HTTPS traffic. However, the documentation does not clearly state whether these ports are protected by a default firewall deny rule until the administrator explicitly configures inbound traffic.

The unresolved behavior is whether an exposed Yunohost instance is immediately reachable on ports 80 and 443 before any firewall adjustments, potentially exposing the administration dashboard and any pre‑installed services.

• Does Yunohost apply a default deny rule for inbound traffic on ports 80 and 443 before any application is installed?
• Can an administrator verify the default firewall state without altering system configuration?
• Which network zones can reach the Yunohost web interface immediately after installation?