There is two option:
1.rich rule –
firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.X.X" reject’
2.First in the chain –
firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 -s 192.168.X.X/32 -j DROP
How to block ip address in centOS 7
Categories: