firewalld

#

[root@serverX ~]# firewall-cmd --get-active-zones
public
  interfaces: enp3s0

[root@serverX ~]# firewall-cmd --list-all
public (default, active)
  interfaces: enp3s0
  sources:
  services: dhcpv6-client http ssh
  ports:
  masquerade: no
  forward-ports:
  icmp-blocks:
  rich rules:

When using source or destination with an address option, the family= option of rule must be either ipv4 or ipv6.

[root@serverX ~]# firewall-cmd --add-rich-rule='rule service name=ftp limit value=2/m accept'
success

testing

#

Add the --timeout=300.

See Also

#

• firewalld.richlanguage
• firewalld.direct