Perhaps it's better to not put all the eggs in one basket?

For the RHEL admins out there, here's a handy firewalld one-liner to mass-add ports:

port=(1 2 3); zone="public"; action="add"; protocol="tcp"; for a in ${port[*]}; do firewall-cmd --zone=$zone --$action-port=$a/$protocol; firewall-cmd --permanent --zone=$zone --$action-port=$a/$protocol; done