firewalld add

Assuming you’re using the default zone of “public” (you may need to temporarily disable selinux (setenforce 0)):

1. To allow everyone to access port 8080/tcp: 

  firewall-cmd –zone=public –add-port=8080/tcp –permanent

2. Allow a server from the IPv4 address 192.168.1.50 to access this server on port 128 over UDP:

firewall-cmd –zone=public –add-rich-rule=’rule family=”ipv4″ source address=”192.168.1.50/32″ port port=”128″ protocol=”udp” accept’ –permanent