systemctl enable firewalld.service
firewall-cmd --state
systemctl start firewalld.service
firewall-cmd --zone=public --add-port=8080/tcp --permanent firewall-cmd --zone=public --add-port=3306/tcp --permanent firewall-cmd --zone=public --add-port=6379/tcp --permanent
systemctl restart firewalld.service
firewall-cmd --reload
原文：https://www.cnblogs.com/wolf-sun/p/9953667.html