• List all available zone names:
  bash

  sudo firewall-cmd --get-zones
  

  Use code with caution.
• List only the active zones (zones currently assigned to a network interface):
  bash

  sudo firewall-cmd --get-active-zones
  

  Use code with caution.

• View rules for the default active zone:
  bash

  sudo firewall-cmd --list-all
  

  Use code with caution.
• View rules for a specific zone (e.g., public):
  bash

  sudo firewall-cmd --zone=public --list-all
  

  Use code with caution.
• View absolutely all rules across every single zone:
  bash

  sudo firewall-cmd --list-all-zones
  

  Use code with caution.

• Add a port (Runtime only - temporary):
  bash

  sudo firewall-cmd --zone=public --add-port=8080/tcp
  

  Use code with caution.
• Add a port permanently (Best practice):
  bash

  sudo firewall-cmd --zone=public --add-port=8080/tcp --permanent
  

  Use code with caution.
• Add a predefined service permanently (e.g., http, https, ssh):
  bash

  sudo firewall-cmd --zone=public --add-service=https --permanent
  

  Use code with caution.

• Check if a specific port is currently allowed:
  bash

  sudo firewall-cmd --zone=public --query-port=8080/tcp
  

  Use code with caution.
• Check if a specific service is currently allowed:
  bash

  sudo firewall-cmd --zone=public --query-service=https
  

  Use code with caution.

• Apply permanent changes to the active system (Crucial after any permanent add/remove):
  bash

  sudo firewall-cmd --reload
  

  Use code with caution.
• Change an interface to a different zone:
  bash

  sudo firewall-cmd --zone=internal --change-interface=eth0 --permanent
  

  Use code with caution.

• Remove a port permanently:
  bash

  sudo firewall-cmd --zone=public --remove-port=8080/tcp --permanent
  

  Use code with caution.
• Remove a service permanently:
  bash

  sudo firewall-cmd --zone=public --remove-service=https --permanent
  

  Use code with caution.

• What specific port numbers or application services (like MySQL, Nginx, or SSH) you need to configure right now.
• If you need a quick automation script containing these commands to instantly secure a fresh server.

# 1. Change the target permanently
sudo firewall-cmd --zone=public --set-target=ACCEPT --permanent

# 2. Reload to apply changes
sudo firewall-cmd --reload

# 1. Add the full port ranges permanently
sudo firewall-cmd --zone=public --add-port=1-65535/tcp --permanent
sudo firewall-cmd --zone=public --add-port=1-65535/udp --permanent

# 2. Reload to apply changes
sudo firewall-cmd --reload

sudo firewall-cmd --zone=public --list-all

sudo firewall-cmd --zone=public --add-interface=eth0 --permanent

sudo firewall-cmd --zone=internal --add-interface=eth1 --permanent

sudo firewall-cmd --reload

sudo firewall-cmd --get-active-zones

# On CentOS 7
sudo yum install cockpit -y
sudo systemctl enable --now cockpit.socket

# On CentOS 8 / AlmaLinux 8 & 9
sudo dnf install cockpit -y
sudo systemctl enable --now cockpit.socket

echo "=== Firewalld Rule Wizard ==="
read -p "Enter Port Number (e.g., 8080): " port
read -p "Enter Protocol (tcp/udp): " proto
read -p "Enter Zone (default public): " zone
zone=${zone:-public}

sudo firewall-cmd --zone=$zone --add-port=$port/$proto --permanent
sudo firewall-cmd --reload
echo "Successfully added $port/$proto to $zone zone!"

nano fw-wizard.sh

#!/bin/bash

# Ensure the script runs with root/sudo privileges
if [ "$EUID" -ne 0 ]; then
  echo "❌ Error: Please run this script using sudo or as root."
  exit 1
fi

while true; do
  clear
  echo "============================================="
  echo "     🔥 FIREWALLD INTERACTIVE TUI WIZARD 🔥  "
  echo "============================================="
  echo " 1) [READ]   List All Rules & Zones"
  echo " 2) [CREATE] Add a Port / Port Range"
  echo " 3) [DELETE] Remove a Port / Port Range"
  echo " 4) [RELOAD] Apply & Reload Firewall Settings"
  echo " 5) [EXIT]   Exit Wizard"
  echo "============================================="
  read -p "Choose an option [1-5]: " choice

  case $choice in
    1)
      clear
      echo "=== ACTIVE ZONES AND CURRENT RULES ==="
      echo "--------------------------------------"
      sudo firewall-cmd --list-all-zones | grep -E '^[a-zA-Z0-9]|ports:|services:|interfaces:'
      echo "--------------------------------------"
      read -p "Press [Enter] to return to menu..." temp
      ;;

    2)
      clear
      echo "=== CREATE: ADD PORT OR RANGE ==="
      read -p "Enter Target Zone (Default: public): " zone
      zone=${zone:-public}
      
      echo "👉 Format Examples: Single port [8080] | Range [8000-8050]"
      read -p "Enter Port or Port Range: " port
      
      read -p "Enter Protocol (tcp/udp) (Default: tcp): " proto
      proto=${proto:-tcp}
      
      echo "--------------------------------------"
      echo "Adding $port/$proto to '$zone' zone..."
      sudo firewall-cmd --zone=$zone --add-port=$port/$proto --permanent
      
      if [ $? -eq 0 ]; then
        echo "✅ Rule added successfully to configuration!"
        echo "💡 Note: You must select Option 4 (Reload) to activate it."
      else
        echo "❌ Failed to add rule. Please verify the port format or zone name."
      fi
      read -p "Press [Enter] to return to menu..." temp
      ;;

    3)
      clear
      echo "=== DELETE: REMOVE PORT OR RANGE ==="
      read -p "Enter Target Zone (Default: public): " zone
      zone=${zone:-public}
      
      echo "👉 Format Examples: Single port [8080] | Range [8000-8050]"
      read -p "Enter Port or Port Range to remove: " port
      
      read -p "Enter Protocol (tcp/udp) (Default: tcp): " proto
      proto=${proto:-tcp}
      
      echo "--------------------------------------"
      echo "Removing $port/$proto from '$zone' zone..."
      sudo firewall-cmd --zone=$zone --remove-port=$port/$proto --permanent
      
      if [ $? -eq 0 ]; then
        echo "✅ Rule removed successfully from configuration!"
        echo "💡 Note: You must select Option 4 (Reload) to activate changes."
      else
        echo "❌ Failed to remove rule. Ensure the rule exists in that zone."
      fi
      read -p "Press [Enter] to return to menu..." temp
      ;;

    4)
      clear
      echo "=== RELOADING SYSTEM FIREWALL ==="
      sudo firewall-cmd --reload
      if [ $? -eq 0 ]; then
        echo "🚀 Changes are now LIVE!"
      else
        echo "❌ Reload failed."
      fi
      read -p "Press [Enter] to return to menu..." temp
      ;;

    5)
      clear
      echo "Goodbye! 👋"
      exit 0
      ;;

    *)
      echo "❌ Invalid choice. Please pick an option from 1 to 5."
      sleep 1.5
      ;;
   Museumesac
done

chmod +x fw-wizard.sh

sudo ./fw-wizard.sh