systemctl stop firewalld.service  #停止防火墙

systemctl start firewalld.service #启动防火墙

firewall-cmd –state #查看防火墙状态

firewall-cmd –reload  #重载防火墙规则

firewall-cmd –add-port=80/tcp –permanent  #永久添加80端口例外

firewall-cmd –remove-port=80/tcp –permanent  #永久删除80端口例外

firewall-cmd –add-port=65001-65010/tcp –permanent  #永久增加65001-65010例外