==Is the firewall running== firewall-cmd --state ==Show default zone== firewall-cmd --get-default-zone ==list current settings== firewall-cmd --list-all ==open port in firewall== firewall-cmd --zone=public --add-port=5000/tcp ==open application in firewall(http)== firewall-cmd --zone=public --add-service=http ==close port in firewall== firewall-cmd --zone=public --remove-port=5000/tcp ==close application in firewall(http)== firewall-cmd --zone=public --remove-service=http ==making permanent== Add the option --permanent to the //add/////remove// commands above. ==list active zones== firewall-cmd --get-active-zones ==list all zones== firewall-cmd --list-all-zones