Eric Garver

I'm not sure what "detection" you expect. If an interface is not explicitly assigned to a zone (e.g. by the user/cli, or NetworkManager), then the traffic goes to the default...

You're using a large amount of zone sources. While we look at this issue I suggest using an `ipset` instead. Then add it to the zone with `--add-source=ipset:`.

Hi, the steam support docs [1] say this: > The network transfer happens on TCP port 27040 and it needs to be allowed by local firewall software. You also need...

Before this can merge we needinfo about the above question. > Hi, the steam support docs [1](https://help.steampowered.com/en/faqs/view/46BD-6BA8-B012-CE43) say this: > > > The network transfer happens on TCP port 27040...

> What changes needs for passing semantic checks? I'll take care of it. I have to squash and merge this pull request with the changes that come from Weblate.

Agree. It's really difficult to know who changed systctls and when. I'm not sure this is worth fixing, because as @arvidjaar points out there are still corner cases.

There are a few options. 1. build from source - as per the [README](https://github.com/firewalld/firewalld#working-with-the-source-repository) - Use the usual automake incantation: `./configure && make && make install` 2. use the [container...

@mbiebl, any thoughts here?

> firewalld.service does not have DefaultDependencies=yes, so is started after sysinit.target. SYSTEMD.UNIT(5) says this is the default value.

This is blocked by support in `nftables`. But I don't expect that to ever be supported because nftables has a true `bridge` family to support transparent firewalls.