Hello
 
I want to create new zone to allow only SSH connections from IP address range and DROP everything else.
 
<?xml version="1.0" encoding="utf-8"?>
<zone target="DROP">
  <short>TEsting</short>
  <description>Testing</description>
  <service name="ssh"/>
  <source address="123.45.67.89/24" />
</zone>
 
That IP range is fake, of course. In the real one, I use my IP range, which is real.
 
I place that inside /etc/firewalld/zones/testing.xml and the zone gets listed after reload. The prblem is that ssh is still open for everyone. If I run nmap from a computer outside that range ("123.45.67.89/24") it says "open" so firewalld is not blocking it.
 
What am I doing wrong? Should I use "ACCEPT" instead of "DROP"?

Thank you