It should be used only if the firewalld service is not running

To add a port to firewall daemon when firewalld is offline

$ sudo firewall-offline-cmd --port=80:tcp

$ sudo firewall-offline-cmd --port=443:tcp

$ sudo firewall-offline-cmd --port=3306:tcp

To remove a port to firewall daemon when firewalld is offline

$ sudo firewall-offline-cmd --remove-port=80:tcp

$ sudo firewall-offline-cmd --remove-port=443:tcp

$ sudo firewall-offline-cmd --remove-port=3306:tcp

$ sudo firewall-offline-cmd --remove-port=53:tcp

To list all the ports under all the zones

$ sudo firewall-offline-cmd --list-all

regards,

T.Dhanasekar