1.查看防火墻狀態
systemctl list-unit-files|grep firewalld.service
或
systemctl status firewalld.service

2.開啟
systemctl start firewalld.service

3.停止
systemctl stop firewalld.service

4.重啟
systemctl restart firewalld.service

5.開機啟動
systemctl enable firewalld.service

6.開機禁止啟動
systemctl disable firewalld.service

7.查看開機是否自啟
systemctl is-enabled firewalld.service;echo $?

8.列舉出所有開機自啟服務
systemctl list-unit-files|grep enabled

9.查看已經開放端口
firewall-cmd --list-ports

10.添加開放端口(重啟防火墻才生效)
firewall-cmd --zone=public --add-port=80/tcp --permanent
--zone 作用域
--add--port 添加端口號
--permanent 永久生效 不用的話重啟機器失效

11.重啟防火墻
firewall-cmd --reload

12.防火墻運行狀態
firewall-cmd --state
 
 

Linux centos7 防火墻設置