On Thu, Oct 03, 2024 at 03:18:01PM -0000, Biagio Vittorioso via firewalld-users wrote:
Hello then, I have created a ‘bunker’ zone and this is the configuration I made at chatgpt's suggestion: bunker (active) target: DROP icmp-block-inversion: yes interfaces: wlp2s0 sources: services: ports: protocols: forward: no masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: rule family="ipv6" destination address="::/0" drop rule family="ipv6" source address="::/0" drop rule family="ipv4" source address="0.0.0.0/0" drop rule family="ipv4" destination address="0.0.0.0/0" drop
These rich rules are redundant with "target: DROP".
The "bunker" zone will drop traffic _incoming_ to the host. To drop outgoing traffic you must use a policy.
Please read the concepts page: