dstny
The new system firewall plugin will be online soon, it will solve your problem
You can try the following rules
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="111.11.11.0/24" port protocol="tcp" port="80" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="111.61.137.100/24" port protocol="tcp" port="80" accept"
firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='0.0.0.0/0' port port=80 protocol=tcp reject"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="111.11.11.0/24" port protocol="tcp" port="443" accept"
firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="111.61.137.100/24" port protocol="tcp" port="443" accept"
firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='0.0.0.0/0' port port=443 protocol=tcp reject"