linux centos7 开放端口

查询指定端口是否已开

[root@nlpes01 kibana]# firewall-cmd --query-port=565tcp 
FirewallD is not running

FirewallD is not running 表示firewalld没有开启 可以通过以下命令查看

 [root@nlpes01 kibana]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: inactive (dead)
     Docs: man:firewalld(1)

打开防火墙
若遇到无法开启
先用：systemctl unmask firewalld.service
然后：systemctl start firewalld.service

 [root@nlpes01 kibana]# systemctl status firewalld
● firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
   Active: active (running) since Mon 2019-06-24 16:47:34 CST; 5s ago
     Docs: man:firewalld(1)
 Main PID: 15131 (firewalld)
   CGroup: /system.slice/firewalld.service
           └─15131 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

Jun 24 16:47:33 nlpes01 systemd[1]: Starting firewalld - dynamic firewall daemon...
Jun 24 16:47:34 nlpes01 systemd[1]: Started firewalld - dynamic firewall daemon.

查看想开的端口是否已开：

[root@nlpes01 kibana]# firewall-cmd --query-port=5601/tcp
no

提示 yes，表示开启；no表示未开启。
添加指定需要开放的端口：

[root@nlpes01 kibana]# firewall-cmd --zone=public --add-port=5601/udp --permanen         
success

重载入添加的端口：

[root@nlpes01 kibana]# firewall-cmd --reload
success

查询指定端口是否开启成功：

[root@nlpes01 kibana]# firewall-cmd --query-port=5601/tcp
yes

操作完成

移除指定端口：

firewall-cmd --permanent --remove-port=5601/tcp