add firewalld inspection notes

active/software_firewalld/firewalld.md

@@ -21,3 +21,13 @@ firewall-cmd --info-service=samba
 # Get zone information
 firewall-cmd --info-zone=drop
 ```
+
+## Inspecting Zones
+
+```bash
+# List all active rules
+firewall-cmd --list-all
+
+# Log all denies
+firewall-cmd --set-log-denied=all
+```