一、查看防火墙状态firewall-cmd --state二、查看已打开的端口firewall-cmd --zonepublic --list-ports三、开启防火墙systemctl start firewalld.service四、设置开机启动防火墙systemctl enable firewalld.service五、开放端口firewall-cmd --zonepublic --add-port80/tcp --permanent关闭端口firewall-cmd --zonepublic --remove-port9000/tcp --permanent六、重新启用防火墙配置firewall-cmd --reload