whiltelist_zone.py

from werkzeug.wrappers import Request, Response
import subprocess

@Request.application
def application(request):
    iplist = ",".join(request.access_route)
    for ipaddr in request.access_route:
        ipaddr = ''.join(i for i in ipaddr if i in '0123456789.')
        cmd = ["firewall-cmd","--zone=sszone","--add-source="+ipaddr+"/32"]
        subprocess.check_call(cmd)
        

    return Response("<h1>Your IP:" + iplist + " will be record!<h1>")

if __name__ == "__main__":
    from werkzeug.serving import run_simple
    run_simple("0.0.0.0", 8000, application, threaded=True)

firewall-cmd --add-port=8000 --permanent # for self port
firewall-cmd --new-zone=sszone --permanent
firewall-cmd --zone=sszone --add-port=8080/tcp
firewall-cmd --zone=sszone --add-port=8080/tcp --permanent # for target port
firewall-cmd --list-all --zone=sszone