On Wed, 2014-10-29 at 19:14 -0700, Jason T. Slack-Moehrle wrote: > so I figured this out, I think: > > firewall-cmd --zone=public --add-port=2888/tcp --permanent > > but if is a known service, you can use: > > firewall-cmd --zone=public --add-service=http --permanent > > and then reload the firewall > > firewall-cmd --reload iptables -A table-name -p tcp --dport 80 -j ACCEPT No reboot needed. 'table-name' can be INPUT or another user defined table name. firewall-cmd with its Windoze-like structure and syntax is definitely unappealing to many normal firewall users. -- Regards, Paul. England, EU. Learning until I die or experience dementia.