SHELL

firewall-cmd remove port

# [sudo] firewall-cmd [--zone=zone_name] --permanent --remove-port=<port_number>/tcp 
$firewall-cmd --zone=public --permanent --remove-port=3306/tcp 
$firewall-cmd --reload