ssh : local network only
firewall-cmd --permanent --zone=dmz --add-service=ssh
firewall-cmd --permanent --zone=dmz --add-source=192.168.0.0/24
firewall-cmd --permanent --zone=public --remove-service=ssh
firewall-cmd --reload
vi /etc/firewalld/zones/public.xml
vi /etc/firewalld/zones/dmz.xml