Use cockpit on hostweb for add Network > firewall > add service button search for service and check. aditional ports need to add a multiport and ranges separated with "," and "-" example: 24007, 24008, 49152-60999 [root@ovirt50 ~]# firewall-cmd --zone=public --list-all public (active) target: default icmp-block-inversion: no interfaces: bond0 bond1 enp202s0f0 enp202s0f1 ens2f0 ens2f1 ovirtmgmt .... sources: services: cockpit dhcpv6-client glusterfs ipsec libvirt-tls ovirt-imageio ovirt-vmconsole snmp ssh vdsm ports: 2049/tcp 54321/tcp 5900-6923/tcp 5666/tcp 16514/tcp 22/tcp 6081/udp 29203/tcp 29204/tcp protocols: forward: no masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: I would like to add a screenshot but I don't know how