1、查看防火墙状态
systemctl status firewalld
2、打开防火墙
systemctl start firewalld
3、关闭防火墙
systemctl stop firewalld
4、查看防火墙的配置
firewall-cmd --state
firewall-cmd --list-all
5、打开80端口
firewall-cmd --permanent --zone=public --add-port=80/tcp
firewall-cmd --reload
6、关闭80端口
firewall-cmd --permanent --zone=public --remove-port=80/tcp
firewall-cmd --reload
7、放通某个端口段
firewall-cmd --permanent --zone=public --add-port=1000-2000/tcp
firewall-cmd --reload