Firewalld
Generic (Permanent) Port
firewall-cmd --zone=public --add-port=80/tcp --permanent firewall-cmd --reload
SNMPD
Create Profile
vim /etc/firewalld/services/snmp.xml
<?xml version="1.0" encoding="utf-8"?> <service> <short>SNMP</short> <description>SNMP protocol</description> <port protocol="udp" port="161"/> </service>
Add Rule
firewall-cmd --reload firewall-cmd --zone=public --add-service snmp --permanent firewall-cmd --reload
Cockpit
firewall-cmd --add-service=cockpit firewall-cmd --add-service=cockpit --permanent
Allow traffic through bridge
firewall-cmd --permanent --direct --passthrough ipv4 -I FORWARD -i vbr0 -j ACCEPT firewall-cmd --permanent --direct --passthrough ipv4 -I FORWARD -o vbr0 -j ACCEPT firewall-cmd --reload
http/s
By Service name
firewall-cmd --zone=public --permanent --add-service=http firewall-cmd --zone=public --permanent --add-service=https firewall-cmd --reload
By Port
firewall-cmd --permanent --add-port=80/tcp firewall-cmd --permanent --add-port=443/tcp firewall-cmd --reload