firewalld can be controlled either from a graphical interface or a command line interface. One must know what zone is active (try firewall-cmd --get-active-zones) to understand what zone is currently in use. To unset an active service (such as openvpn which is predefined) one could use the command line as root to enter: firewall-cmd --zone='THE_ZONE_THAT_SHOWED_AS_ACTIVE' --remove-service=openvpn . This changes the firewall that is currently running only, not the configured setup which is changed by adding --permanent between the firewall-cmd and the --zone= entries. Note that current connection states are not affected. A reboot will restore the original (as changed by any firewall-cmd --permanent commands that have run in the session) Note that the man firewall-cmd page is quite capable but does require a basic understanding of netfilter (iptables). The graphical interface is more understandable Amicalement, Dave -- Maple Park Development Linux Systems Integration 1224 DuBois St. Louis MO 63122-5518 USA Tel : 01-314-941-2496 Fax :01-866-542-7647 http://www.maplepark.com/ mapleparkdevelopment(a)gmail.com If IP addresses weighed one gram each: IPv4 = half the Empire State Building IPv6 = 56 billion earths I use Linux and I wouldn't touch Outlook even if I were using a Hazmat suit and an isolation lab kit. On Sat, Sep 10, 2016 at 1:50 PM, Jake Trader <longid(a)fedoraproject.org&gt; wrote:

Assuming the public zone is the only active zone, IMO that should be sufficient. The permanent firewall is what is restored (brought up) when boot-up occurs so you could --remove-service openvpn in the run-time instance if you note a problem in openvpn and run firewall-cmd --complete-reload (disconnects any hanging connections) to allow the permanent firewall to take effect when the problem is fixed (Or maybe just reboot). The drop zone drops everything anyway and appears not active so doesn't act in this scope. Amicalement, Dave -- Maple Park Development Linux Systems Integration http://www.maplepark.com/ If IP addresses weighed one gram each: IPv4 = half the Empire State Building vs. IPv6 = 56 billion earths I use Linux and I wouldn't touch Outlook even if I were using a Hazmat suit and an isolation lab kit. On Sun, Sep 11, 2016 at 9:38 PM, Jake Trader <longid(a)fedoraproject.org&gt; wrote: