services.firewalld.zones.<name>.ports.*.port

16 bit unsigned integer; between 0 and 65535 (both inclusive) or (submodule)