firewall-cmd --state
firewall-cmd --add-port=10080/tcp --permanent
firewall-cmd --add-port=10085/tcp --permanent
firewall-cmd --reload
firewall-cmd --query-port=10085/tcp
firewall-cmd --query-port=10080/tcp
原文：https://www.cnblogs.com/rainbowbridge/p/13951551.html