#!/bin/bash  

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="172.16.1.252/32" port protocol="tcp" port="22" accept"

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="100.100.100.0/24" port protocol="tcp" port="22" accept"

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="0.0.0.0/0" port protocol="tcp" port="22" reject"

firewall-cmd --reload