CentOS

# firewall-cmd --zone=public --list-services
dhcpv6-client ldap ssh ldaps
# firewall-cmd --zone=public --list-ports
9830/tcp


So, I am testing secure ldap and would like to block ldap(port 389), how do I do that without modifying the service?.....

Thanks in advance....

# firewall-cmd --info-service=ldap
ldap
ports: 389/tcp
protocols:
source-ports:
modules:
destination:

It seems that service "ldap" contains only that port, so you can safely remove it from your configuration: Note: You can temporarily remove it (skip the "--permanent" and the reload) for a short test.

THANK YOU