man firewall-cmd
systemctl status firewalld
firewall-cmd state
systemctl firewalld.serivce start/stop/restart
# 查询端口是否开放
firewall-cmd --query-port=8080/tcp
# permanent 持久的
# 添加开放端口
firewall-cmd --permanent --add-port=80/tcp
# 减少开放端口
firewall-cmd --permanent --remove-prot=8080/tcp
#重启防火墙(修改配置后要重启防火墙)
firewall-cmd --reload
原文:https://www.cnblogs.com/anycc/p/14640420.html