firewalled centos7

zone绑定网卡

firewall-cmd --zone=internal --add-interface=ens192 --permanent

firewall-cmd --permanent --zone=internal --add-rich-rule="rule family="ipv4" source address="192.168.10.0/24" accept"

[root@byos000 system]# firewall-cmd --get-active-zones
internal
interfaces: ens192
public
interfaces: ens160

[root@byos000 system]# firewall-cmd --permanent --zone=internal --add-rich-rule="rule family="ipv4" port protocol="tcp" port="123" accept"
success
You have mail in /var/spool/mail/root
[root@byos000 system]# firewall-cmd --permanent --zone=internal --add-rich-rule="rule family="ipv4" port protocol="udp" port="123" accept"
success
[root@byos000 system]# firewall-cmd --reload
success