RHEL7配置ssh - 限制/允许IP

# firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="10.10.1.10" port protocol="tcp" port="22" accept'
# firewall-cmd --permanent --remove-service=ssh
# firewall-cmd --reload
# firewall-cmd --list-all

Firewalld Rich Rules Explained with Examples