As far as I know, there are 2 main ways to add rules in
firewalld, normal "zone" rules and rich-rules. Also, I understand that when we set
target="DROP, all new incoming connections will be dropped unless we add rules to allow selected incoming traffic.
I want to ask is there any standard pattern in which the
firewalld rules will be applied to an incoming packet when we add new rules using regular zone rules vs rich-rules?
For example, is this the order in which
firewalldrules will always be applied:
- Normal rules
- Rich rules
- Default drop policy rule