For CentOS 7.x, the following is the firewalld configuration for Bahmni

firewalld-config.sh

# Run script with sudo privilege
# Install firewalld
yum install firewalld -y

# Stops and masks iptables if already running
systemctl stop iptables
systemctl mask iptables

# Enable and start firewalld
systemctl start firewalld
systemctl enable firewalld

# Remove the default dhcp service in default zone
firewall-cmd --remove-service=dhcpv6-client --permanent

# Add http, https and ssh services for Bahmni
firewall-cmd --add-service=ssh --permanent
firewall-cmd --add-service=http --permanent
firewall-cmd --add-service=https --permanent

# Add port to allow access to openerp Bahmni
firewall-cmd --add-port=8069/tcp --permanent

# Save the Configuration made
firewall-cmd --reload

# List all configurations for all zones
firewall-cmd --list-all

Can you describe what all does this enable and what does it disable?

Added as comments.