Show the full firewalld configuration with firewall-cmd --list-all
One command to dump the default zone's services, open ports, and rich rules — the firewalld equivalent of a ruleset view.
Run `sudo firewall-cmd --list-all` to display the active zone's target, services, open ports, and rich rules in one view.
01Command
Command
$ sudo firewall-cmd --list-all02What it does
firewalld organizes rules into zones, so unlike ufw there's no single flat list; `--list-all` shows the default zone, and `--zone=work --list-all` inspects another. Crucially, rules added at runtime vanish on reload — anything you want to keep needs `--permanent`, then `firewall-cmd --reload` to apply. To see the actual low-level rules the kernel holds, `firewall-cmd --list-rich-rules` drills into the complex entries the summary view glosses over.
03Risk
!Warning: Don't forget `--permanent` + `--reload`: a port opened only at runtime disappears at the next firewalld reload or reboot.
04Undo
✓No undo needed — this command does not change persistent state.
05Sources
- firewall-cmd(1) — firewalld command line clientEvidence: Documents --list-all showing zone configuration including ports, services, and rich rules.
- Firewalld — ArchWikiEvidence: Community guide on querying firewalld state and permanently adding rules with --permanent plus --reload.
Last verified: 2026-09-17 · Category: Network