File: //lib/firewalld/zones/LW_INFRA.xml
<?xml version="1.0" encoding="utf-8"?>
<zone target="%%REJECT%%">
<short>prometheus</short>
<description>Prometheus Monitoring Ranges</description>
<!-- Source IPs to place in this zone -->
<source address="10.20.9.0/24"/>
<source address="10.30.9.0/24"/>
<source address="10.40.11.0/28"/>
<source address="10.41.9.0/24"/>
<source address="10.50.9.0/24"/>
<source address="165.84.212.253/32"/>
<!-- tcp rules to allow -->
<rule><accept/><port port="21" protocol="tcp"/></rule>
<rule><accept/><port port="22" protocol="tcp"/></rule>
<rule><accept/><port port="25" protocol="tcp"/></rule>
<rule><accept/><port port="53" protocol="tcp"/></rule>
<rule><accept/><port port="80" protocol="tcp"/></rule>
<rule><accept/><port port="110" protocol="tcp"/></rule>
<rule><accept/><port port="143" protocol="tcp"/></rule>
<rule><accept/><port port="443" protocol="tcp"/></rule>
<rule><accept/><port port="990" protocol="tcp"/></rule>
<rule><accept/><port port="993" protocol="tcp"/></rule>
<rule><accept/><port port="995" protocol="tcp"/></rule>
<rule><accept/><port port="2080" protocol="tcp"/></rule>
<rule><accept/><port port="2082" protocol="tcp"/></rule>
<rule><accept/><port port="2083" protocol="tcp"/></rule>
<rule><accept/><port port="3306" protocol="tcp"/></rule>
<rule><accept/><port port="8443" protocol="tcp"/></rule>
<rule><accept/><port port="9100" protocol="tcp"/></rule>
<rule><accept/><port port="9104" protocol="tcp"/></rule>
<rule><accept/><port port="9110" protocol="tcp"/></rule>
<rule><accept/><port port="9115" protocol="tcp"/></rule>
<rule><accept/><port port="9117" protocol="tcp"/></rule>
<rule><accept/><port port="9253" protocol="tcp"/></rule>
<!-- icmp rules to allow -->
<rule><accept/><icmp-type name="echo-request"/></rule>
<rule><accept/><icmp-type name="echo-reply"/></rule>
</zone>