Firewall cli

systemctl status firewalld
firewall-cmd -state

firewall-cmd --get-zones
firewall-cmd --zone=work --list-all
firewall-cmd --get-default-zone

firewall-cmd --set-default-zone=work
firweall-cmd --list-services

firewall-cmd --add-service=http --permanent
firewall-cmd -reload

firewall-cmd --remove-service=http --permanent
firewall-cmd --reload

firweall-cmd --add-port=331/tcp --permanent
firewall-cmd --reload

firweall-cmd --remove-port=331/tcp --permanent
firewall-cmd --reload

systemctl stop firewalld
systemctl disable firewalld
firewall-cmd --state