If you try to remove one of the predefined zones from Firewalld, e.g. public
, you encounter the following error:
Error: BUILTIN_ZONE: 'public' is built-in zone
I don’t like that Firewalld is bloated with all of these built in zones that I will never use. I want to get rid of them, but, from what I’ve been able to find, it appears non-trivial to do so.
EDIT (2024-01-27T01:55Z):
I came across this GitHub issue. So it appears that this is a known “issue”, and it could potentially be changed in the future, albeit probably far in the future. It is a very strange initial design choice, though, in my opinion.
Maybe firewalld are not the right firewall for your use case if you feel the need to remove “bloat” zones? Do they impact your firewall efficiency?
No – it just seems unnecessary to force the user to have the default ones – just allow the user to create the zones that they want/need.