Open port firewalld

Hi Fellers
I have a weird situation at firewall.
I have been deploy a mariadb container on server.


$ docker ps
d65e7fd9a65d | mariadb:latest | "docker-entrypoint.s…"  | 3 months ago  |  Up 6 weeks  |   0.0.0.0:3306->3306/tcp  |   mysql

As shown it is reachable from outside of sever.


$ nmap -Pn -p3000-4000 [SERVER IP ADDRESS]

PORT     STATE SERVICE 
3306/tcp open  mysql


but when i check yast firewall, there is not such opened port in there but my application can connect to db with server ip address and port 3306.


$ firewall-cmd --list-services  
ssh dhcpv6-client http


I want to restrict access to database for just one ip address can access to it.

Can you explain why firewall could not see this port?