Directly manage the firewalld rules on RH derived distributions.

defaults/main.yml

@@ -12,3 +12,6 @@ squid_safe_ports:
 
 squid_max_object_size: '10 MB'
 squid_disk_cache: '2048 16 256'
+
+squid_firewalld_services:
+  - { service: 'squid', state: 'enabled', zone: '{{ firewalld_default_zone }}' }

tasks/main.yml

@@ -17,4 +17,13 @@
     service: name=squid state=started enabled=yes
 
   when: squid_install | bool
-  tags: [ 'squid', 'proxy' ]
+  tags: [ 'squid', 'proxy' ]
+
+- name: Manage the squid firewalld rules
+  block:
+    - name: Manage the squid related firewall service
+      firewalld: service={{ item.service }} zone={{ item.zone }} permanent={{ item.permanent | default(True) }} state={{ item.state }} immediate=True
+      with_items: '{{ squid_firewalld_services }}'
+
+  when: ansible_distribution_file_variety == "RedHat"
+  tags: [ 'squid', 'proxy', 'firewall', 'firewalld', 'iptables', 'iptables_rules' ]