//查看防火墙状态firewall-cmd --state//打开防火墙systemctl start firewalld//查看当前防火墙开放的端口firewall-cmd --list-ports//添加80端口firewall-cmd --zone=public --add-port=80/tcp --permanent//删除80端口firewall-cmd --zone=public --remove-port=80/tcp --permanent//添加 80 -> 8080 端口转发firewall-cmd --add-forward-port=port=80:proto=tcp:toport=8080//重启防火墙 重启防火墙后之前设置的端口转发会失效firewall-cmd --reload
