firewalld

http://itpro.nikkeibp.co.jp/atcl/column/14/072400026/080500003/
現在のゾーンを確認

# firewall-cmd --get-active-zone
public
  interfaces: enp2s0

ゾーンの状態確認

# firewall-cmd --zone=public --list-all
public (default, active)
  interfaces: enp2s0
  sources: 
  services: dhcpv6-client ssh
  ports: 
  masquerade: no
  forward-ports: 
  icmp-blocks: 
  rich rules: 

設定追加

# firewall-cmd --permanent --add-service=http

設定例

# cat /etc/firewalld/zones/public.xml
<?xml version="1.0" encoding="utf-8"?>
<zone>
  <short>Public</short>
  <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
  <service name="dhcpv6-client"/>
  <service name="http"/>
  <service name="ssh"/>
  <port protocol="tcp" port="3389"/>
</zone>