// ADD
firewall-cmd --permanent --zone=public --add-rich-rule='
rule family="ipv4"
source address="213.186.33.99"
port protocol="tcp" port="3306" accept'
// REMOVE
firewall-cmd --permanent --zone=public --remove-rich-rule='
rule family="ipv4"
source address="213.186.33.99"
port protocol="tcp" port="3306" accept'
// RELOAD
firewall-cmd --reload
// LIST ALL
firewall-cmd --list-all