add firewalld inspection notes

active/software_firewalld/firewalld.md

@@ -20,4 +20,14 @@ firewall-cmd --info-service=samba
 
 # Get zone information
 firewall-cmd --info-zone=drop
+```
+
+## Inspecting Zones
+
+```bash
+# List all active rules
+firewall-cmd --list-all
+
+# Log all denies
+firewall-cmd --set-log-denied=all
 ```