防火墙

firewalld

查询防火墙状态：firewall-cmd --state

关闭防火墙：systemctl stop firewalld.service

开启防火墙： systemctl start firewalld.service

禁止firewall开机启动：systemctl disable firewalld.service

放行端口：firewall-cmd --add-port=8080/tcp，此处需要注意cmd和--之间有空格

设置服务启动 使用systemctl enable [服务名]

添加
firewall-cmd --zone=public --add-port=80/tcp --permanent    （--permanent永久生效，没有此参数重启后失效）
重新载入
firewall-cmd --reload
查看
firewall-cmd --zone=public --query-port=80/tcp
删除 添加的时候有permanent，删除的时候也要加上，添加的时候没有，删除的时候也不需要加
firewall-cmd --zone=public --remove-port=80/tcp --permanent

iptables

service iptables status
service iptables save
service iptables restart

Step 1 : Install iptables-services

yum install iptables-services
Step 2 : Manage iptables with systemctl

Use the below given syntax
systemctl [stop|start|restart|reload] iptables

Example.

To start iptables

systemctl start iptables
To stop iptables

systemctl stop iptables
To restart iptables

systemctl restart iptables
To reload iptables

systemctl reload iptables

http://www.server110.com/linux/201309/937.html

http://blog.csdn.net/xlgen157387/article/details/52672988

centos7中firewall防火墙命令详解
http://www.jb51.net/article/97964.htm

RedHat Linux下iptables防火墙设置
https://www.cnblogs.com/chenjfblog/p/8317880.html