firewalld equivalence command for iptables?

[mrleft]

不懂 iptables 也不懂 firewalld
要用 firewalld 求解答

iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A FORWARD -s 10.31.0.0/24 -j ACCEPT

---
?
---

#iptables -A INPUT -i venet0 -p esp -j ACCEPT
---
firewall-cmd --permanent – zone=public --add-rule filter INPUT -p esp -j ACCEPT
---
#iptables -A INPUT -i venet0 -p udp --dport 500 -j ACCEPT
---
firewall-cmd --zone=public --permanent --add-port=500/udp
---

iptables -A FORWARD -j REJECT
iptables -t nat -A POSTROUTING -s 10.31.0.0/24 -o venet0 -j MASQUERADE

---
?
---