On Thu, Aug 21, 2014 at 11:18 PM, Josh Boyer <jwboyer@fedoraproject.org> wrote:

Yep!  That's why I said "for now".  I just didn't want Elad to remove
it in a few days before we actually discussed it.


Just to make things clear: I never intended to remove anything while there's active discussion going on. I'm sorry that wasn't clear enough.

Since I'm working (both upstream and downstream) to polish our default install set in the last few days it might seem to people that I'm in a "remove everything spree". Let it be clear that this is not the case. I'm simply doing whatever I can to make sure our product as polished as possible. This includes removal of stuff that were needed before but now are no longer needed - but something like firewall-config is not something that can be removed before we all agree that our system will work well without.

Fedora 21 is a very important milestone. Due to the long development cycle people have extremely high expectations of Fedora 21, and as such we must do our best to ship a product as polished as we possibly can.

To address some other points raised here, even if the firewalld team is working on improving the UI, I still don't think it should be included by default, as our default configuration means most people will not need to touch firewall settings.

We can also add a note about it in the documentation so people will know about this, something along the lines of "Fedora 21 Workstation allows incoming connections to ports higher than 1025 by default. If you need to run a server on a lower port number, such as a web server listening to port 80 (http), you can install the Firewall configuration utility from GNOME Software to allow usage of this port".

--
-Elad Alfassa.