Am 03.10.2024 um 10:39:41 Uhr schrieb Biagio Vittorioso via firewalld-users:
Good morning everyone I have a problem with firewalld on any distro I try from debian to ubuntu, including fedora. The problem is this: I configure all the firewalld from terminal I open all the ports I need to test if I surf like ‘https’ http’ and I don't open “dns” and “dns-over-tls” so logically I shouldn't surf the internet and instead, after making the settings permanent and reloading the firewalld, I surf anyway. So I was wondering: is there something I'm missing about how to configure the firewalld, or is there actually some bug in it?
Browsing the internet needs outgoing traffic and allowing "related" incoming traffic. That is the default.
Post firewall-cmd --list-all
If you don't want to allow port 80/443 and DNS, you have to block that outgoing.
To surf the internet, DNS resolution can be done via normal unicast DNS, but also DNS over HTTPS inside the browser.