firewalld usage

[root@localhost ~]# sudo firewall-cmd --state

running

[root@localhost ~]#  firewall-cmd --list-all

public (active)

  target: default

  icmp-block-inversion: no

  interfaces: ens33

  sources:

  services: ssh dhcpv6-client

  ports:

  protocols:

  masquerade: no

  forward-ports:

  source-ports:

  icmp-blocks:

  rich rules:

               

[root@localhost ~]# firewall-cmd --get-zones

block dmz drop external home internal public trusted work

[root@localhost ~]#  firewall-cmd --zone=public --add-service=http

success

[root@localhost ~]#  firewall-cmd --zone=public --add-service=https

success

[root@localhost ~]# firewall-cmd --zone=public --list-services

ssh dhcpv6-client http https

[root@localhost ~]# firewall-cmd --zone=public --permanent --add-service=http

success

[root@localhost ~]# firewall-cmd --zone=public --permanent --list-services

ssh dhcpv6-client http

[root@localhost ~]# firewall-cmd --zone=public --permanent --add-service=https

success

[root@localhost ~]#