I have a centos 7.1 and firewalld installed.
There are 4 distinct services on that server: mysqld, mongod, jabberd, httpd
I need to configure that server to allow connections to jabberd and httpd from anywhere and mysqld and mongod from 2 addresses 10.0.0.1, 10.0.0.2
At the moment the public zone is active and default, bond interface is assigned here. httpd and jabberd are there and everything is working.
I have tried creating my own zone with specific sources and mongod/mysqld. I have also tried adding that to existing "trusted"/"internal" zones. But services are not reachable in this way. The only way to reach those services is to add them to "public".
I even tried to add rich rules to that public zone to allow those services from specific addresses. Still fails.