Firewalld default zone limits on Rocky Linux: public allowlist vs. restrictive zones for preventing accidental service exposure
On a Rocky Linux server, firewalld is enabled by default with the public zone, which permits only a small set of services such as ssh and dhcpv6-client . The goal is to make sure that services installed later are never reachable externally unless deliberately allowed, while keeping remote administration access intact. The uncertainty is which strategy the de
rockylinux