O'Reilly logo
  • Huajun Gu thinks this is interesting:

-A INPUT -m state --state new -m tcp -p tcp --dport 4505 -j ACCEPT

From

Cover of Learning SaltStack

Note

firewall-cmd --permanent --zone=public --add-port=4505/tcp
firewall-cmd --permanent --zone=public --add-port=4506/tcp