sudo firewall-cmd --permanent --zone=trusted --add-source=xxx.xxx.xxx.xxx/xx
sudo firewall-cmd --set-default-zone=block
sudo firewall-cmd --reload
sudo firewall-cmd --permanent --zone=trusted --add-source=xxx.xxx.xxx.xxx/xx
sudo firewall-cmd --set-default-zone=block
sudo firewall-cmd --reload