Firewalld rules that can be implement in cloudera nodes

Hi I've tried to implement firewall using the firewalld of my rhel7 server which is also our datanode, what rules and ports do I need to implement here so that the cloudera services is still functioning and will not block there connection?

firewall-cmd --list-all
public
target: default
icmp-block-inversion: no
interfaces:
sources:
services: dhcpv6-client ssh
ports:
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules: