firewall-cmd --add-port={80/tcp,80/udp}
放行 80端口

firewall-cmd --add-port={80/tcp,80/udp} --permanent
永久放行 放行 80端口

firewall-cmd --zone=public --query-port=443/tcp
放行 443端口的tcp
firewall-cmd --zone=public --query-port=443/udp
放行 443端口的udp

firewall-cmd --zone=public --list-ports
查看添加了那些放行规则

systemctl start firewalld
启动防火墙

systemctl stop firewalld
关闭防火墙

systemctl status firewalld
查看防火墙状态

systemctl disable firewalld
开机禁用防火墙

systemctl enable firewalld
开机启用防火墙

firewall-cmd --reload
重启防火墙