firewall-cmd --get-default-zone

Category: Security & Hardening

firewall-cmd --get-default-zone

Show the default firewalld zone

Prints the zone new interfaces are assigned to, usually public on servers. Understanding the default zone matters because rules apply per zone, and new interfaces inherit the default. Change it with --set-default-zone, for example to internal for trusted networks.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.