启动
systemctl start firewalld关闭
systemctl stop firewalld查看状态
systemctl status firewalld 开机禁用
systemctl disable firewalld开机启用
systemctl enable firewalld
启动一个服务
systemctl start firewalld. service关闭一个服务
systemctl stop firewalld. service重启一个服务
systemctl restart firewalld. service显示一个服务的状态
systemctl status firewalld. service在开机时启用一个服务
systemctl enable firewalld. service在开机时禁用一个服务
systemctl disable firewalld. service查看服务是否开机启动
systemctl is- enabled firewalld. service查看已启动的服务列表
systemctl list- unit- files| grep enabled查看启动失败的服务列表
systemctl -- failed
查看版本
firewall- cmd -- version查看帮助
firewall- cmd -- help显示状态
firewall- cmd -- state查看所有打开的端口
firewall- cmd -- zone= public -- list- ports更新防火墙规则
firewall- cmd -- reload查看区域信息
firewall- cmd -- get- active- zones查看指定接口所属区域
firewall- cmd -- get- zone- of- interface= eth0拒绝所有包
firewall- cmd -- panic- on取消拒绝状态
firewall- cmd -- panic- off查看是否拒绝
firewall- cmd -- query- panic
添加
firewall- cmd -- zone= public -- add- port= 80 / tcp -- permanent （-- permanent永久生效，没有此参数重启后失效）重新载入
firewall- cmd -- reload查看
firewall- cmd -- zone= public -- query- port= 80 / tcp删除
firewall- cmd -- zone= public -- remove- port= 80 / tcp -- permanent
)
)
