5.8.5. 영역 및 소스를 사용하여 특정 도메인에 대해서만 서비스를 허용

~]# firewall-cmd --get-zones
block dmz drop external home internal public trusted work

~]# firewall-cmd --zone=internal --add-source=192.0.2.0/24

~]# firewall-cmd --zone=internal --add-service=http

~]# firewall-cmd --runtime-to-permanent

~]# firewall-cmd --zone=internal --list-all
internal (active)
  target: default
  icmp-block-inversion: no
  interfaces:
  sources: 192.0.2.0/24
  services: dhcpv6-client mdns samba-client ssh http
  ...