If you try to remove one of the predefined zones from Firewalld, e.g. public, you encounter the following error:

Error: BUILTIN_ZONE: 'public' is built-in zone

I don’t like that Firewalld is bloated with all of these built in zones that I will never use. I want to get rid of them, but, from what I’ve been able to find, it appears non-trivial to do so.

EDIT (2024-01-27T01:55Z):

I came across this GitHub issue. So it appears that this is a known “issue”, and it could potentially be changed in the future, albeit probably far in the future. It is a very strange initial design choice, though, in my opinion.

  • Oisteink@feddit.nl
    link
    fedilink
    arrow-up
    6
    ·
    10 months ago

    Maybe firewalld are not the right firewall for your use case if you feel the need to remove “bloat” zones? Do they impact your firewall efficiency?

    • Kalcifer@sh.itjust.worksOP
      link
      fedilink
      arrow-up
      1
      arrow-down
      2
      ·
      edit-2
      10 months ago

      Do they impact your firewall efficiency?

      No – it just seems unnecessary to force the user to have the default ones – just allow the user to create the zones that they want/need.