systemctl stop firewalld.service #停止防火墙
systemctl start firewalld.service #启动防火墙
firewall-cmd –state #查看防火墙状态
firewall-cmd –reload #重载防火墙规则
firewall-cmd –add-port=80/tcp –permanent #永久添加80端口例外
firewall-cmd –remove-port=80/tcp –permanent #永久删除80端口例外
firewall-cmd –add-port=65001-65010/tcp –permanent #永久增加65001-65010例外