https://cloud.tencent.com/developer/article/1933586?from=15425
开放TCP端口
firewall-cmd —zone=public —add-port=80/tcp —permanent # 开放tcp80端口
firewall-cmd —zone=public —add-port=443/tcp —permanent # 开放tcp443端口
firewall-cmd —zone=public —add-port=3306/tcp —permanent # 开放tcp3306端口
firewall-cmd —zone=public —add-port=6379/tcp —permanent # 开放tcp6379端口
开放UDP端口
firewall-cmd —zone=public —add-port=9595/udp —permanent # 开放udp9595端口
关闭TCP端口
firewall-cmd —zone=public —remove-port=80/tcp —permanent #关闭tcp5672端口
firewall-cmd —zone=public —remove-port=443/tcp —permanent #关闭tcp443端口
firewall-cmd —zone=public —remove-port=3306/tcp —permanent #关闭tcp3306端口
firewall-cmd —zone=public —remove-port=6379/tcp —permanent #关闭tcp6379端口
关闭UDP端口
firewall-cmd —zone=public —remove-port=9595/udp—permanent #关闭udp9595端口
配置生效
查看防火墙所有开放的端口
firewall-cmd —zone=public —list-ports
关闭防火墙
如果要开放的端口太多,嫌麻烦,可以关闭防火墙 systemctl stop firewalld.service
查看防火墙状态
查看监听的端口
TCP:netstat -ntlp UDP: netstat -nulp