systemctl start firewalld;#启动 systemctl stop firewalld;#停止 systemctl status firewalld;#查看状态 systemctl disable firewalld;#开机禁用 systemctl enable firewalld;#开启启动 firewall-cmd --zone=public --add-port=80/tcp --permanent #开放80/tcp端口 (--permanent永久生效,没有此参数重启后失效); firewall-cmd --reload;# firewall-cmd --zone= public --query-port=80/tcp;#查看80/tcp端口 firewall-cmd --zone= public --remove-port=80/tcp --permanent;#删除该端口开放