$ firewall-cmd --list-all --zone=public
$ firewall-cmd --list-services --zone=public
$ firewall-cmd --list-ports --zone=public
$ firewall-cmd --add-service=ssh --zone=public --permanent
$ firewall-cmd --remove-service=ssh --zone=public --permanent
$ firewall-cmd --add-port=22/tcp --zone=public --permanent
$ firewall-cmd --remove-port=22/tcp --zone=public --permanent
$ firewall-cmd --get-services
$ firewall-cmd --reload