Is <include> element of firewalld services a Fedora-only thing?

habono · September 28, 2022, 9:04pm

In firewalld documentation there is no mention of include, but when I look at the actual service files on a vanilla installation of F36 I can see many services with this element. Is it specific to Fedora or is it an omission in firewalld documentation?

dalto · September 28, 2022, 9:09pm

It is not specific to Fedora. It is covered in the firewalld documentation here.

Here is an example straight from firewalld github:

github.com

firewalld/firewalld/blob/master/config/services/plex.xml

<?xml version="1.0" encoding="utf-8"?>
<service>
  <short>PLEX</short>
  <description>Plex Media Server (PMS) is the back-end media server component of Plex. It organizes content from personal media libraries and streams it to the network.</description>
  <port protocol="tcp" port="32400"/><port protocol="udp" port="32400"/> <!-- Plex media server access (required)> -->
  <port protocol="tcp" port="32469"/><include service="ssdp"/> <!-- Plex DLNA -->
  <port protocol="tcp" port="3005"/><!-- plex home theater control (plex companion) -->
  <port protocol="tcp" port="8324"/><!-- Roku control (plex companion) -->
  <port protocol="udp" port="32410"/><!-- gdm discovery -->
  <port protocol="udp" port="32412"/><!-- gdm discovery -->
  <port protocol="udp" port="32413"/><!-- gdm discovery -->
  <port protocol="udp" port="32414"/><!-- gdm discovery -->
</service>