# 开机自启防火墙sudo systemctl enable firewalld.service# 开机禁用防火墙sudo systemctl disable firewalld.service# 启动防火墙sudo systemctl start firewalld# 关闭防火墙sudo systemctl stop firewalld# 查看防火墙状态sudo systemctl status firewalld# 查看防火墙状态sudo firewall-cmd --state# 重启防火墙sudo firewall-cmd --reload# 查看开放的端口sudo firewall-cmd --list-ports# 开启防火墙端口sudo firewall-cmd --zone=public --add-port=80/tcp --permanent# 关闭防火墙端口sudo firewall-cmd --zone=public --remove-port=9200/tcp --permanent
–zone #作用域–add-port=80/tcp #添加端口,格式为:端口/通讯协议–remove-port=80/tcp #移除端口,格式为:端口/通讯协议–permanent #永久生效,没有此参数重启后失效注意:添加端口后,必须用命令firewall-cmd --reload重新加载一遍才会生效