The instructions add the firewall-config package (the GTK front‑end for firewalld) to a fresh Fedora 36 system, first refreshing the system with sudo dnf upgrade --refresh -y and then installing the GUI via sudo dnf install firewall-config -y. After installation you ensure SELinux permits the UI by setting firewalld_gui with sudo setsebool -P firewalld_gui 1, enable and start the firewalld daemon (sudo systemctl enable --now firewalld) if it isn’t already running, and finally launch the graphical tool from the Activities menu or with firewall-config &. The GUI lets you select zones, open ports, and block services visually, and you can keep it synchronized with any command‑line changes by using File → Reload. With these few commands and a couple of clicks you have a fully functional firewall management UI on Fedora 36.

How to Install/Enable the FirewallD GUI on Fedora 36

You’ll get the graphical front‑end for FirewallD up and running so you can toggle zones, open ports, or block services without digging through firewall-cmd. The steps below work on a fresh Fedora 36 workstation with GNOME (or any other desktop that supports GTK).

Install the GUI package

1. Open a terminal and make sure your system is up to date – old libs can cause dependency errors.

   sudo dnf upgrade --refresh -y
   

2. The GUI lives in the firewall-config package, which isn’t installed by default on minimal spins. Install it:

   sudo dnf install firewall-config -y
   

   Why this matters: firewall-config pulls in the necessary Python bindings and the GTK UI; without it you only have the CLI tool.

3. Fedora ships with SELinux enforcing by default. The GUI needs permission to talk to firewalld. If you see a “permission denied” error when launching, run:

   sudo setsebool -P firewalld_gui 1
   

   Explanation: This boolean tells SELinux that the graphical client is allowed to control the daemon.

Enable and start the firewalld service (if it isn’t already)

1. Check the status:

   systemctl status firewalld
   

2. If it shows “inactive” or “disabled”, turn it on:

   sudo systemctl enable --now firewalld
   

   Why: The GUI is just a front‑end; it can’t do anything unless the firewalld daemon is running.

Launch the GUI

• From GNOME Activities (or your desktop’s app launcher) type “Firewall”. Click the Firewall Configuration icon.
• If you prefer the command line, you can start it with:

  firewall-config &
  

When the window opens you’ll see a list of zones on the left and a set of services/ports on the right. Tick boxes to allow traffic, or click the “Add” button to open a custom port.

Real‑world tip

I’ve seen users lose connectivity after a driver update because NetworkManager reset the default zone to public. The GUI makes it painless to switch back to home or work without typing firewall-cmd --set-default-zone=home every time. Just open the drop‑down at the top of the window and pick the correct zone.

Optional: Keep the UI in sync with command‑line changes

If you occasionally tweak rules via firewall-cmd, refresh the GUI view by hitting File → Reload. This forces the front‑end to re‑read the daemon’s current configuration, preventing stale data from confusing you later.

That’s it – a few commands and a couple of clicks, and you’ve got a usable firewall UI on Fedora 36.