etcfirewalldservices

The /etc/firewalld/services directory contains XML service definition files used by the firewalld daemon to map service names to network ports, protocols, and ICMP settings. These files allow administrators to open named services in zones without specifying every port individually. The directory typically holds files that can be edited by the administrator; default service definitions are provided by the system in /usr/lib/firewalld/services or /usr/share/firewalld/services.

Each file in this directory is an XML document named after the service (for example ssh.xml) and defines a service element. A typical service definition includes a short description, and one or more port entries such as <port protocol="tcp" port="22"/>. Some service files may also declare ICMP behavior or other attributes that influence how firewalld handles traffic for that service.

Firewalld uses these service definitions when a service is added to a zone. The permanent configuration reads the files from /etc/firewalld/services, while runtime changes can be made through firewall-cmd and stored permanently if specified. Administrators can query available service names with firewall-cmd --get-services and view details of a particular service with firewall-cmd --info-service service-name.

Creating or modifying service files is common when adding custom applications. When doing so, place the file in /etc/firewalld/services, ensure valid XML, and accurately reflect the application's ports and protocols. After changes, reload firewalld with firewall-cmd --reload for them to take effect.

See also: firewalld, firewall-cmd, zones, ports, xml service definitions.