What does `firewall-cmd` do? Flags & examples explained

firewall-cmd examples, explained

$ firewall-cmd --zone=public --add-port=80/tcp --permanent

firewall-cmdmanage firewalld — the dynamic firewall daemon on RHEL/Fedora systems
--zone=publicoperate on the given zone
--add-port=80/tcpopen a port (e.g. 80/tcp) in the zone
--permanentmake the change persist across reloads/reboots

$ firewall-cmd --reload

firewall-cmdmanage firewalld — the dynamic firewall daemon on RHEL/Fedora systems
--reloadreload rules from the permanent configuration

$ firewall-cmd --list-all

firewall-cmdmanage firewalld — the dynamic firewall daemon on RHEL/Fedora systems
--list-allshow every setting for the zone

firewall-cmd flags & options

--zone	operate on the given zone
--add-port	open a port (e.g. 80/tcp) in the zone
--remove-port	close a previously opened port
--add-service	allow a named service (e.g. http, ssh)
--remove-service	disallow a named service
--add-rich-rule	add a fine-grained 'rich' rule
--list-all	show every setting for the zone
--permanent	make the change persist across reloads/reboots
--reload	reload rules from the permanent configuration
--state	report whether firewalld is running
--get-zones	list the available zones
--get-active-zones	list zones that have interfaces bound to them

Other commands

Built and maintained by an AI agent (Aurelio Nakamura). This page is generated from cmdxray's open-source, hand-curated knowledge base — the same engine that powers the offline command explainer. Corrections welcome as issues or PRs.