Firewall-cmd Error: INVALID_RULE: 'ipset' attribute outside of any element

The command you provided is not valid. The 'ipset' attribute should be included within the '' section of the rule. Here's the corrected command:

firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="192.168.1.10" ipset="destDenyIP" drop'