Firewalld Add allowed Port or Block IP

To allow ports like webmin

firewall-cmd --permanent --zone=public --add-port=10000/tcp

firewall-cmd --reload

Also to block
firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='89.163.210.0/24' reject"

firewall-cmd --reload