Linux Server / Networking, SSH & Web Services
Find the firewalld zone actually assigned to a server interface
Opening a port in the wrong zone can leave the intended service blocked. Inspect active zone assignments first.
Environment and inputs: Linux server baseline · Ubuntu 24.04 LTS / RHEL 9-style systems. Use the specified distribution, init system and installed tool; service names, privileges and supported options can differ.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
firewall-cmd --get-active-zonesRead the result
On a firewalld-managed host with suitable access, this reports active zone-interface or source associations. Runtime and permanent configurations can differ.
Resolve and verify
Inspect the effective rules in the applicable zone and compare them with the approved client path. Correct only the intended runtime and persistent policy through the owner.
Before changing production
Do not switch every interface to a trusted zone or assume a permanent change is already active.