It seems this is a KDE-ism
Per the thread at Why does Debian ship a preconfigured firewall?:
Does the firewalld search result display an entry with "[installed,automatic]" next to it?
Per the thread at Why does Debian ship a preconfigured firewall?:
Another (messy) way of checking whether a package was pulled in as a dependency is to run an apt search:installing Debian testing with KDE currently sets up firewalld by default, which sets up a firewall blocking all incoming connections apart from DHCPv6 and SSH.
Technically, firewalld ends up installed because the KDE Plasma desktop recommends the plasma-firewall package, which recommends firewalld. Those dependencies are optional and can be removed. firewalld isn’t installed by default with KDE in Debian 12, but that’s because the plasma-desktop package specifies an invalid version for plasma-firewall!
Code:
apt search firewalld
Statistics: Posted by Uptorn — 2025-01-15 01:13