diff --git a/rpmbuild/SPECS/omc.spec b/rpmbuild/SPECS/omc.spec
index 2eeb4f8..e5b3309 100644
--- a/rpmbuild/SPECS/omc.spec
+++ b/rpmbuild/SPECS/omc.spec
@@ -129,7 +129,14 @@ if [ ! -e libwsutil.so ]; then  ln -s libwsutil.so.13.1.0 libwsutil.so; fi
 cd ${UsrLocalBinDir}
 if [ ! -e ${OmcDaemon} ]; then  ln -s ${OmcBinDir}/omcsvc.sh ${OmcDaemon}; fi
 # sed -i 's/listen       80;/listen       1080;/g' ${NginxEtcDir}/nginx.conf
-# sed -i 's/listen       \[::\]:80;/listen       \[::\]:1080;/g' ${NginxEtcDir}/nginx.conf 
+# sed -i 's/listen       \[::\]:80;/listen       \[::\]:1080;/g' ${NginxEtcDir}/nginx.conf
+
+# setting firewall
+PortList="80 33030 443 33443 22222"
+for Port in ${PortList}; do 
+    firewall-cmd --zone=public --add-port=${Port}/tcp --permanent
+done
+
 systemctl daemon-reload
 systemctl enable restagent.service
 systemctl enable crontask.service