Linux防火墙开关命令

#查看状态
systemctl status firewalld.service
#启动
systemctl start firewalld.service
#重启
systemctl restart firewalld.service
#停止
systemctl stop firewalld.service
#查看规则
firewall-cmd --list-all
#查询端口是否开放
firewall-cmd --query-port=8080/tcp
#开放8080端口
firewall-cmd --permanent --add-port=8080/tcp
#移除端口
firewall-cmd --permanent --remove-port=8080/tcp
#添加路由规则
firewall-cmd --permanent --add-rich-rule=“rule family=“ipv4” source address=” 192.168.1.100" port protocol=“tcp” port=“3306” accept"
#附：如果需要删除规则，参考
firewall-cmd --permanent --remove-rich-rule=“rule family=“ipv4” source address=” 192.168.1.100" port protocol=“tcp” port=“3306” accept"