1.启动防火墙

systemctl start firewalld 

2.禁用防火墙

systemctl stop firewalld

3.设置开机启动

systemctl enable firewalld

4.停止并禁用开机启动

sytemctl disable firewalld

5.重启防火墙

firewall-cmd --reload

6.查看状态

systemctl status firewalld 或者 firewall-cmd --state

7.查看端口状态

firewall-cmd --query-port=8080/tcp

8.添加端口开放

firewall-cmd --add-port=8080/tcp --permanent
permanent:添加此项意味着永久生效
添加后需要重启防火墙