yeah, but i have openvpn and opened 1194 port in my router. I found this page to make things more secure:
But the rules on that vpn/firewall page wasn't enough (pihole doesn't work anymore), then i found this page and it makes things mutch better again: Redirecting...
But ok, maybe i dont need the firewall-cmd rules anymore. 