Eric Garver

AFAICS, the web interface is not enabled by default. If that's true, does it make sense to open in the standard `transmission-client` service? Or do we need `transmission-client-web` service?

> You're performing an operation over default zone ('public'), but your connections/interfaces are in zone 'docker' (see --get-active-zones) You most likely need to use --zone=docker option. I agree that this...

@KrzysztofHajdamowicz, I recently pushed rich rule priority support. You can use this to create a low priority rich rule that logs with a limit and occurs at the end of...

Some DEs, e.g. Gnome, have removed systray icons. This includes the icon for firewall-applet. For MATE, see here: https://ubuntu-mate.community/t/system-tray-icons-not-showing-in-panel-18-04/16870/5

They're just configuration files in `/usr/lib/firewalld/zones`. You can delete them. firewalld provides them with the default install.

Ugh. I guess there are explicit checks in the start up code for the built in zones.

I agree we should remove this false restriction. The default configuration lives in /usr/lib/firewalld. I'm not sure how to represent in /etc/firewalld that a user removed a zone. Usually firewalld...

There are a lot of changes here that I'm not convinced are providing real benefit. The ipset entry changes are for sure. But some of the explicit `del`s I am...

Hrm, the question is "will removing these ports break users?". The foreman team is best suited to answer that. Assuming the answer is "no" I suggest the following: - remove...

> Is there a precedent in firewalld for those "it depends" options? I think a fair example is services that have TCP and UDP support. They can be split into...