# firewalld (zone `public`, interface `eno1`)

## Open ports (current)

| Port | Purpose |
|------|---------|
| 80/tcp | systemd → Caddy HTTP 9000 |
| 9000/tcp | Caddy HTTP (VeciGate WAN:80) |
| 9001/tcp | Caddy HTTPS (VeciGate WAN:443) |
| 8080/tcp | Tor OR |
| 23235/tcp | (legacy list; SSH is service `ssh` on 22) |
| services | `ssh`, `dhcpv6-client` |

## Removed

- 443/tcp, 8082/tcp — obsolete after 9000-series DNAT

Live dump: `list-all.txt`.