firewall-cmd --state
firewall-cmd start
firewall-cmd stop
firewall-cmd restart
firewall-cmd --permanent --add-port =8080-8085/tcp
firewall-cmd --reload
firewall-cmd --permanent --remove-port =8080-8085/tcp
原文：https://www.cnblogs.com/Edward-Wang/p/11069178.html