1.查看防火墻狀態(tài)：
firewall-cmd --state
2.啟動(dòng)防火墻
systemctl start firewalld
3.關(guān)閉防火墻
systemctl stop firewalld
4.檢查防火墻開(kāi)放的端口
firewall-cmd --permanent --zone=public --list-ports
5.開(kāi)放一個(gè)新的端口
firewall-cmd --zone=public --add-port=8080/tcp --permanent
6.重載防火墻
firewall-cmd --reload
7.驗(yàn)證新增加端口是否生效
firewall-cmd --zone=public --query-port=8080/tcp
8.防火墻開(kāi)機(jī)自啟動(dòng)
systemctl enable firewalld.service
9.防火墻取消某一開(kāi)放端口
firewall-cmd --zone=public --remove-port=9200/tcp --permanent
轉(zhuǎn)自：https://www.cnblogs.com/xiaobaixie/p/11210614.html
