# 查看防火墙状态
systemctl status firewalld
# 启动防火墙
systemctl start firewalld
# 关闭防火墙
systemctl start firewalld
# 重启防火墙
systemctl restart firewalld
# 开机启动防火墙
systemctl enable firewalld
# 开机关闭防火墙
systemctl disable firewalld
#查看防火墙规则(只显示/etc/firewalld/zones/public.xml中防火墙策略)
firewall-cmd --list-all
#查看所有的防火墙策略(即显示/etc/firewalld/zones/下的所有策略)
firewall-cmd --list-all-zones
#重新加载配置文件,更新防火墙规则
firewall-cmd --reload
# 查看已开放的端口
firewall-cmd --list-port
# 添加开放80端口
firewall-cmd --zone=public --add-port=80/tcp —-permanent
# 删除80端口
firewall-cmd --zone=public --remove-port=80/tcp —permanent