systemctl status firewalld
systemctl start firewalld
systemctl stop firewalld
service firewalld start
systemctl unmask firewalld.service
然后:systemctl start firewalld.service
firewall-cmd --add-port=123/tcp --permanent
firewall-cmd --reload
firewall-cmd --query-port=123/tcp
原文:https://www.cnblogs.com/xietianhua/p/11345749.html