RHEL has a good firewall-cmd cheat sheet.
Code:
firewall-cmd --zone=trusted --add-source=192.168.1.40 --permanent
I think it is not a big issue in a domestic environment to leave all ports open to/from a specific IP.
Anyway, if anyone could give some hints about how to figure out what are the specific ports the scanner uses, I appreciate.