[root@router ~]# firewall-cmd --get-active-zones
internal
  interfaces: enp0s8
public
  interfaces: enp0s3