firewall-cmd --state
systemctl start firewalld.service
systemctl stop firewalld.service
firewall-cmd --zone=public --list-ports
firewall-cmd --zone=public --add-port=8080/tcp --permanent
firewall-cmd --reload # 配置立即生效
firewall-cmd --zone=public --remove-port=8080/tcp --permanent
firewall-cmd --reload # 配置立即生效
netstat -lnpt