1、檢視防火牆狀態    systemctl status firewalld

2、關閉防火牆  systemctl stop firewalld

3、開啟防火牆  systemctl start firewalld

4、禁止防火牆開機自啟動  systemctl disable firewalld

5、設定防火牆開機自啟動  systemctl enable firewalld

6、檢視防火牆已開放的埠列表(預設不開放任何埠)   firewall-cmd –list-ports

7、

firewall-cmd --zone=public --add-port=80/tcp --permanent(永久生效)

8、更新防火牆規則  firewall-cmd --reload

9、刪除開放的埠  firewall-cmd --zone=public  --remove-port=80/tcp  --permanent

10、檢視8 0埠狀態：firewall-cmd --zone=public --query-port=80/tcp

11、只允許伺服器192.168.1.1/24網段的3306埠能訪問

firewall-cmd --permanent --add-rich-rule="rule family="ipv4" source address="192.168.1.1/24" port protocol="tcp" port="3306" accept"