Tested on CentOS 7.
List permanently enabled services:
firewall-cmd --permanent --list-services
List running config enabled services:
firewall-cmd --list-services
List permanently enabled ports:
firewall-cmd --permanent --list-ports
List enabled ports in the running config:
firewall-cmd --list-ports
List permanent config:
firewall-cmd --permanent --list-all
List running config:
firewall-cmd --list-all
Add permanently enabled service:
firewall-cmd --permanent --add-service=samba
Add an enabled service to the running config:
firewall-cmd --add-service=samba
Add a permanently enabled port range:
firewall-cmd --permanent --add-port=2500-5000/tcp
Add an enabled port range to the running config:
firewall-cmd --add-port=2500-5000/tcp