# firewall-cmd
# The firewalld command-line client.
# More information: <https://firewalld.org/documentation/man-pages/firewall-cmd>.
# View the available firewall zones:
firewall-cmd --get-active-zones
# View the rules which are currently applied:
firewall-cmd --list-all
# Permanently move the interface into the block zone, effectively blocking all communication:
firewall-cmd --permanent --zone=block --change-interface=enp1s0
# Permanently open the port for a service in the specified zone (like port 443 when in the `public` zone):
firewall-cmd --permanent --zone=public --add-service=https
# Permanently close the port for a service in the specified zone (like port 80 when in the `public` zone):
firewall-cmd --permanent --zone=public --remove-service=http
# Permanently open two arbitrary ports in the specified zone:
firewall-cmd --permanent --zone=public --add-port=25565/tcp --add-port=19132/udp
# Reload firewalld to force rule changes to take effect:
firewall-cmd --reload