systemctl start firewalld.service
systemctl enable firewalld.service
systemctl status firewalld.service
firewall-cmd --state
firewall-cmd --zone=public --add-port=8080/tcp --permanent
firewall-cmd --zone=public --remove-port=80/tcp --permanent
#restart firewall
firewall-cmd --reload
#list for ports for internet
firewall-cmd --zone=public --list-ports
#然后转发 tcp 22 端口至 3753
firewall-cmd --zone=public --add-forward-port=port=22:proto=tcp:toport=3753
#转发 22 端口数据至另一个 ip 的相同端口上
firewall-cmd --zone=public --add-forward-port=port=22:proto=tcp:toaddr=192.168.1.100
#转发 22 端口数据至另一 ip 的 2055 端口上
firewall-cmd --zone=public --add-forward-port=port=22:proto=tcp:toport=2055:toaddr=192.168.1.100
systemctl stop firewalld.service
systemctl disable firewalld.service
原文：http://www.cnblogs.com/DavinWei/p/6916142.html