1.开启防火墙服务
systemctl start firewalld.service
2.设置开机自启
systemctl enable firewalld.service
3.查看防火墙状态
systemctl status firewalld
![在这里插入图片描述](https://img-blog.csdnimg.cn/fafbe44af3914a3ab4201257d1bf5808.png)
4.操作防火墙相关命令
firewall-cmd --state
systemctl status firewalld.service
systemctl start firewalld.service
systemctl stop firewalld.service
systemctl enable firewalld.service
systemctl disable firewalld.service
firewall-cmd --permanent --query-port=80/tcp
firewall-cmd --reload
firewall-cmd --get-zones
firewall-cmd --get-services
firewall-cmd --query-service ftp
firewall-cmd --add-service=ftp
firewall-cmd --add-service=ftp --permanent
firewall-cmd --remove-service=ftp --permanent
firewall-cmd --add-port=80/tcp --permanent
firewall-cmd --zone=public --remove-port=80/tcp --permanent
iptables -L -n
man firewall-cmd
firewall-cmd --list-ports
参数含义:
--zone
--permanent