firewall-cmd
add / remove port
firewall-cmd --permanent --add-port=<port_num>/<protocol>
firewall-cmd --permanent --remove-port=<port_num>/<protocol>
firewall-cmd --permanent --add-port=22/tcp
firewall-cmd --permanent --remove-port=22/tcp
open port on specific ip
serverfault answer